last executing test programs:

1m41.903098286s ago: executing program 1 (id=44):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

1m41.473980017s ago: executing program 1 (id=47):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000340)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed)
ftruncate(r1, 0x100000)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0)
write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0)
write(r3, &(0x7f0000000500)='1\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r4, &(0x7f0000000580)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r5, &(0x7f0000000680)='loop\x00', 0x4)
symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0)
read(r7, &(0x7f0000000900), 0x64)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0)
read(r8, &(0x7f0000000980), 0x64)

1m40.371595091s ago: executing program 1 (id=49):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x32, 0x1, 0x0, {0x1, @tcp_ip4_spec={@empty, @empty}, {0x0, @random}, @tcp_ip4_spec={@empty, @empty}, {0x0, @random}}}})

1m40.08573639s ago: executing program 1 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0)
read(r1, &(0x7f0000000540), 0x64)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='8\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0)
read(r3, &(0x7f0000000400), 0x64)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0)
read(r4, &(0x7f0000000400), 0x64)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0)
read(r5, &(0x7f0000000400), 0x64)

1m39.169836405s ago: executing program 1 (id=58):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000800)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mount(&(0x7f0000000800)=@filename='nfsd\x00', &(0x7f0000000900)='./proc/fs/nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='2049\n\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/fs/nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='1\n\x00', 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @local}, 0x10)
sendto(r2, &(0x7f0000000700)="80000050123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000006000000010000000461626364000000047465737400000000", 0x54, 0x0, 0x0, 0x0)

1m38.186504284s ago: executing program 1 (id=64):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)='1\x00', 0x1)

1m21.465485064s ago: executing program 32 (id=64):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)='1\x00', 0x1)

47.172447815s ago: executing program 6 (id=226):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\x00')
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)

42.387135752s ago: executing program 6 (id=241):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/size\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r1, &(0x7f00000003c0)='64\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r3, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r4, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00")
ioctl(r4, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100")

39.717543837s ago: executing program 6 (id=245):
syz_mount_image$ocfs2(&(0x7f0000020300), &(0x7f0000020340)='./file0\x00', 0x0, &(0x7f0000020380)={[{@heartbeat_none}]}, 0x1, 0x202f6, &(0x7f00000203c0)="$eJzs3T1sU+sdB+D3OAGSQMg3INTB6lSpEsQs9GNpaUtFkaBqRVWxpM4HkNbEEDtVh4JgZOjQrUNBoipbt0p06ILaqVvvcLe73OlKV7oMl4nl5sr2cezz2r4xECc35HmkYM45fj+sZPn5vP/35FLVW6uV/GolX1zLl5duVM7lf18ubdxeCbldstfj059B/J787gEAAAAAAADe3dUfXfzlr86F8Le//vO/m5ubm6HmQeiq0H7w+R+XMq+pXNSm1m/33nbK9RDCbOe8QghDIYRf/yuEJIRwKD13OH09lv7U5vuff//vxNAOzebR6bknZy9fevz03rVnlbtXnvd8YxLCR6XrHz/88B9n5z792Z92aHgAAADo6qe/uHrt5/OF8GIi3H95vjOvH01fe+XjTQCAfWenvvkHgP2jlf/Hk9dd7tePpK/DPdpvbk4MfpIAAADAO7l05eqPfzJfSNf/Jx3Xv5PG+89+OBSmQpd1/9H6/0NR++7r/zvHeVvN+TXHnQxJ7kzmOJc7cyaEmQuN41MTY7lSuVL99o3yxtryjk0DAAAAvtay+T+u3m/P/8N95f/DUfvdyv/NcZv5v3XcyP9H0uNTYSxZLC4vLJbKS7+rtNY35MN0crNUXiyWFlbXyssrC8VSqbwUwmh6fTaMJJVSubpwu3hnbKuv0eTWSnG9urhSrLbVSnwjjDf7Wlyt3i7eSfcaaFybyJXX79wqri0sr65/b35+fj6M97xWCMe35jeVrPyhurJWbcys0TKEia+4Xqh//mbfk0nbB6s3n+p9rTC99RmPJb8tb6yvFUv1NjPdzxdm2/oqlZeKpbZx5npfK5xom391fWNtqVhdWSiVbzY/38n0+m/GO68X3uYPBgAA4IDK5v/etXB/f5j0lf+PRO0Gv//fq8F2DwAAAO+BbP5vVPmPt9+e/3/jDnIt//95ePv8PxL1P6j8P5vOczxJwqu29QSv0/O99isAAACAgyib/xtV85nV+ekC8l73/0ej/D8a9b8b9//jaoLa8dSFwY4KAAAA+0k2/6dV812+AKjn/9z29//Hov73Iv/XTkzt3BYDAAAAsO9l839avf8g85b6kv5+1/8fjfofVP6fuZjO834SXoXWvoUvz9fOhdDcyaD+SINc4xwAAAAcVNn8H1fvt+//n+tr/79jUfvd2v+/OW68//+3Jhr7/wMAAMBBls3/cfX+m+f/8aj9buX/5rjyPwAAAHTK5v+4er+l3/X/x6N2A6//H048ARAAAAC2kc3/cfV+S7/5fyJqJ/8DAADA3svm/7SKPvPw/B/U/+03/09G/Q8q/+ea8xzOPv//i6HG+WnP/wMAAIAt2fwfV++39Jv/p6J27v8DAADA3svm/7R6P595S/1We/35/0ln7s9F+X866n9Pnv+fD2EqN9hRAQAAYD/J5v+0ev8N8v+hKP/PRP3vWf7/5mBHBQAAgP0km//j6v2WWv7/IGy//n82ajf4/B/CfLzpIAAAAJCRzf9x9X5Lv/l/Lmon/wMAAMDey+b/uHq/pb7+f2T7/H8iajfo/P9Jx+J/AAAAIJbN/3H1fku/+f9k1E7+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN53L77/3b+EEIYbR5MhhHztP0nbT8aj03NPzl6+9PjpvWvPKnevPO/2HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgS3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsKuHJswCEBBAP2BDJAmTapsYC1OIIKdg4i1A7iBjYKFK1g7moiNggNYvAcHd3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPtmZpHxHvY30i4r+X1ykX3e87JkU+TG01N3W53H0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANnbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsKO/aM0DEdxAH/5RReXBL2EU0g2V0URFyOCJ/AaHsXJK3iEnqdLD1AKTQIlf6BQaJfPZ3nDl+S99fcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7r9bP9+qibiCyutnnE3+//6jAv+3n7NP99foYbAQAAgNO8vbfPL3XTv/uzSf5QdHP9mPbpzebnO2bm4G7UE4z7hM50z9hS37B037C3jCxVEXHd5/dFSlV13L8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDHDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCrtzjAIQAEYB+P+tBlfhFEZSruMkJldwAeVgTMpgUhZ93/Tq9eoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBvt0I193cRWRXFkxjKv+70vrzA97/P7iwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDPnQEAAP//WMQszw==")
umount2(&(0x7f0000020340)='./file0\x00', 0x0)

37.938935217s ago: executing program 4 (id=255):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x100)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='rdma\x00', 0x4)
write(0xffffffffffffffff, &(0x7f0000000480)='ipv4\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='127.0.0.1\x00', 0xa)
write(0xffffffffffffffff, &(0x7f0000000580)='4421\x00', 0x4)
symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
write(r6, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=127.0.0.1,trsvcid=4421\x00', 0x39)

35.333663381s ago: executing program 6 (id=259):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
read(r0, &(0x7f0000100000)=""/262144, 0x40000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write(r1, &(0x7f0000100000)='\x00'/262144, 0x40000)
ftruncate(r1, 0x2000000)
umount2(&(0x7f00000006c0)='./file0\x00', 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0)
ioctl(r2, 0x40086610, &(0x7f0000000800)="0080000000000000")

34.386660289s ago: executing program 6 (id=262):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a)

33.967356056s ago: executing program 4 (id=265):
mkdirat(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0x1ff)
syz_mount_image$ocfs2(&(0x7f00000048c0), &(0x7f0000004900)='./file0\x00', 0x0, &(0x7f0000004940), 0x1, 0x0, &(0x7f0000004980))
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/test\x00', 0x42, 0x1ff)
setxattr(&(0x7f0000000000)='./file0/test\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000200)='value\x00', 0x5, 0x0)

33.529676946s ago: executing program 4 (id=268):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='md0\x00', 0x3)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x81ff, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='raid1\x00', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r2, &(0x7f0000000800)='1\x00', 0x1)

33.338046342s ago: executing program 6 (id=270):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='1\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x98)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x80, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", &(0x7f0000000400)=""/128, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

32.448651873s ago: executing program 33 (id=270):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='1\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x98)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x80, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", &(0x7f0000000400)=""/128, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

32.406340707s ago: executing program 4 (id=275):
socket$netlink(0x10, 0x3, 0x14)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='/dev/nullb0\x00', 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='rdma\x00', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r4, &(0x7f0000000480)='ipv4\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='127.0.0.1\x00', 0xa)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r6, &(0x7f0000000580)='4421\x00', 0x4)
symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
write(r7, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=127.0.0.1,trsvcid=4421\x00', 0x39)

31.085252135s ago: executing program 4 (id=278):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0)
r0 = socket(0x2, 0x1, 0x0)
bind(r0, &(0x7f0000000600)=@in={0x2, 0x801, @empty}, 0x10)
dup2(r0, 0x64)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540), 0x0)

30.808699779s ago: executing program 4 (id=280):
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
write(r2, &(0x7f0000000700)='auto\x00', 0x4)
write(r3, &(0x7f0000000700)='auto\x00', 0x4)
write(r4, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
write(r2, &(0x7f0000000800)='on\x00', 0x2)
write(r3, &(0x7f0000000800)='on\x00', 0x2)
write(r4, &(0x7f0000000800)='on\x00', 0x2)

15.57205571s ago: executing program 34 (id=280):
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
write(r2, &(0x7f0000000700)='auto\x00', 0x4)
write(r3, &(0x7f0000000700)='auto\x00', 0x4)
write(r4, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
write(r2, &(0x7f0000000800)='on\x00', 0x2)
write(r3, &(0x7f0000000800)='on\x00', 0x2)
write(r4, &(0x7f0000000800)='on\x00', 0x2)

9.541794107s ago: executing program 3 (id=380):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)

8.046885168s ago: executing program 3 (id=388):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0)
r0 = socket(0x2, 0x1, 0x0)
bind(r0, &(0x7f0000000600)=@in={0x2, 0x801, @empty}, 0x10)
dup2(r0, 0x64)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)='10', 0x2)

7.584697686s ago: executing program 3 (id=390):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='raid1\x00', 0x5)

7.241196175s ago: executing program 3 (id=392):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}})
syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000")
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000")
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000")
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000")
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000")

6.917346094s ago: executing program 2 (id=393):
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000110)={0x84, &(0x7f0000000210)={0x40, 0xa1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000120)={0x84, &(0x7f0000000220)={0x40, 0xa1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000130)={0x84, &(0x7f0000000230)={0x40, 0xa1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000150)={0x84, &(0x7f0000000250)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000160)={0x84, &(0x7f0000000260)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000170)={0x84, &(0x7f0000000270)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000280)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000190)={0x84, &(0x7f0000000290)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000001a0)={0x84, &(0x7f00000002a0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000001b0)={0x84, &(0x7f00000002b0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, &(0x7f00000002c0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000001d0)={0x84, &(0x7f00000002d0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000001e0)={0x84, &(0x7f00000002e0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)

6.366057401s ago: executing program 7 (id=395):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/comms/1/addr\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)="020052487f00000100"/128, 0x80)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/dlm/cluster/comms/2/addr\x00', 0x2, 0x0)
write(r2, &(0x7f0000000440)="020030397f00000100"/128, 0x80)
close(r2)
r3 = syz_io_uring_setup(0x20, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0)=<r6=>0x0)
r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="0600000000000000020000000401000000000000000000006d796c7300"/128, 0x80}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r8 = socket(0x2, 0x1, 0x0)
setsockopt(r8, 0x1, 0x2, &(0x7f0000000780)="01000000", 0x4)
bind(r8, &(0x7f00000007c0)=@generic={0x2, "30397f00000100"}, 0x10)
connect(r8, &(0x7f0000000840)=@generic={0x2, "52487f00000100"}, 0x10)
write(r8, &(0x7f00000008c0)="02000300000000000200000028000300050000000000000002000300000000000200000010000500", 0x28)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
write(r8, &(0x7f0000000900)="02000300010000000200000010000400", 0x10)

5.996658756s ago: executing program 0 (id=397):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='md0\x00', 0x3)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x81ff, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='raid1\x00', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r2, &(0x7f0000000800)='1\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a00)='1:0\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write(r4, &(0x7f0000000c00)='0\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
nanosleep(&(0x7f0000000f00)={0x1}, 0x0)

5.012905709s ago: executing program 8 (id=349):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)="020052487f00000100"/127, 0x7f)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)="020030397f00000100"/128, 0x80)
close(r2)
syz_io_uring_setup(0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)

4.925725852s ago: executing program 0 (id=402):
r0 = syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x0, 0x676, &(0x7f0000000740)="$eJzs3UtsXFcZB/DvXj/IY8COkgXpBkMWRUKxPXFcBQRqi1jw6AJEF1SqBFYycayMkxC7VWyMaAMSjwVCXdAFUlVY0FJAWBTUIkBYPFYgVIlKqAgiYAWVqqK2YoU06Ixn7KG+rp36cSvu7yddz7nnzOR84+Q/917lHjuAyhpJX/KI4xExnEUM9Yz1R2dwZPV5SxPLF9KWRav18RezyCJiZmL5Qvf5WefxcOfFZyLil++POPHFjfPOLSxenGo2G1c7+2Pzs1fG5hYWT87MTk03phuXTtVvq58Zr09Ont619/rnH99/9PbDH/7J95997IfXvnXxb1ncEbXOWO/72C0jMbL2PenVn0XctduTlaSv8+9koOxCuGlfuO/sl9Pf39GIOBERR2Io+jqpv+Ud9740FNf+stlr//WrR/65n7UCu6/1uYgWUEllf/4AAAAAAAAAAAAAAAAAAADrWq3M+n+oqLI/fwAAAAAAAAAAAAAAAAAAgI1mJpYvdLf9mvOPP9uvmYAiL9wZEf2r+V/qbKsj/THSfjwQAxFx6OUsPW1NFhEf3eHcK3dEjMT7Hp7/xD3fSVt0Pod2+McC2/TAgxHx1qLjf9bO/3AcaO8dejn/n/zn6bWdx9R//XXMffy5lP+Z7/X2yT/sn53k/2s9+X/odcx98hsp/1//UW+f/EM1LP267AqAsnzo6bIrgGprn/+P9/dvdv6/E1e2GP/PXDr/f/HdvX3O/6EaHv9M2RUAZfnpD8quACjLV/9QdgVQbSt3puv/ov//y9fu/4mC+39qEfGpHc49+fN0/f/2o719rv9h/3Tv/1vacP/fev77Nrn/79FtztH69/Sxov5jT6X8P3qte/9f2tL83XsBgb31woMRtxTmP1vLf1aQ/zwilrc5x9Jv750t6j96d8r/4/fLP5Sj9c2IW6M4/12pNTY/e2VsbmHx5Mzs1HRjunHpVP22+pnx+uTk6bHzM83G+OrXwjnqD13/fFH/87en/A9dl38oRzr+H9ok/1ud/69sc45PfmX4Y0X9p+9J+f/AxGvnP39+MLs7lRCDnZ5rU/PzV+sRg9ldG/tP3ex3AKqjm5FuhlL+33nita//i87/D0bEM9ucc/HqU98t6n/ksZT/bz/h+A/lSPk/t8Xxvyj/qe+v25zjvS/9vnB50JN/Svn/+2flHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3qjwiapHlo2vtPB8djTgcEcfiUN68PDf/rvOX77t0Lo1FDMdA3v1N/0Or+1nar7fb6/unXrU/ERFHIuJLfQfb+6NnLzfPlf3moaJqETee/PTZwbLrAAAAAAAAAAAAAAAAAAAA1h1+1fr/f/Strv8H/n/VIm48+5unf5Har/SVXQ2wn1L+n3hl9iMh/1A58g/VJf9QXfIP1SX/UF3yD9Ul/1Bd8g/VJf9QXfIP1dWbfwAAAAAAAAAAAAAAAAAAAAAAAABgbx1528pzWUQ88J6D7S0Z7IwNlFoZsNfysgsASuNHf0N19ZddAFAa1/hAtsX4gc0GVrZ6JQAAAAAAAAAAAACwW249bv0/VJX1/1Bd1v9DdVn/D9XlGh+w/h8AAAAAAAAAAAAA3vhq7S3LRztrgWuR56OjEW+OiOEYyM7PNBvjEfGWiPhd38Cb0n697KKBHalF3PjgM8ceLrsOAAAAAAAAAAAAAAAAAABg3dzC4sWpZrNxVUNDQ2OtUfYnEwAAAAAAAAAAAAAAAAAAVM/6ot+yKwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8qz//v+9a5T9HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBm/TcAAP//7HpP/g==")
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
sendfile(r2, r1, 0x0, 0x80000)
ftruncate(r2, 0x100000)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
close(r0)
umount2(&(0x7f00000006c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./loop1\x00', 0x61ff, 0x701)
mount(&(0x7f0000000400)=@filename='./loop1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0)
ioctl(r4, 0x40086610, &(0x7f0000000800)="0004000000000000")

4.777349141s ago: executing program 8 (id=403):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='raid1\x00', 0x5)

4.770452884s ago: executing program 7 (id=404):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='rdma\x00', 0x4)
write(0xffffffffffffffff, &(0x7f0000000480)='ipv4\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='127.0.0.1\x00', 0xa)
write(0xffffffffffffffff, &(0x7f0000000580)='4421\x00', 0x4)
symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
write(r6, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=127.0.0.1,trsvcid=4421\x00', 0x39)

4.568134083s ago: executing program 8 (id=405):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/ep.0/direction\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='in\n', 0x3)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x0, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)
r5 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x1, 0x2)
write$midi(r5, &(0x7f0000000540)='hello', 0x5)
r6 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x2)
write$midi(r6, &(0x7f00000005c0)='hello', 0x5)

4.089920745s ago: executing program 0 (id=406):
r0 = syz_mount_image$xfs(&(0x7f000000d4c0), &(0x7f000000d500)='./file0\x00', 0x0, &(0x7f000000d540), 0x0, 0xd4a0, &(0x7f000000d580)="$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")
r1 = openat(r0, &(0x7f000001aa40)='file1\x00', 0x42, 0x1ff)
unlinkat(r0, &(0x7f000001ab40)='file1\x00', 0x0)
openat(r0, &(0x7f000001ab80)='file2\x00', 0x42, 0x1ff)
unlinkat(r0, &(0x7f000001ac80)='file2\x00', 0x0)
openat(r0, &(0x7f000001acc0)='file3\x00', 0x42, 0x1ff)
unlinkat(r0, &(0x7f000001adc0)='file3\x00', 0x0)
openat(r0, &(0x7f000001ae00)='file4\x00', 0x42, 0x1ff)
unlinkat(r0, &(0x7f000001af00)='file4\x00', 0x0)
openat(r0, &(0x7f000001af40)='file5\x00', 0x42, 0x1ff)
unlinkat(r0, &(0x7f000001b040)='file5\x00', 0x0)
openat(r0, &(0x7f000001b080)='file6\x00', 0x42, 0x1ff)
unlinkat(r0, &(0x7f000001b180)='file6\x00', 0x0)
openat(r0, &(0x7f000001b1c0)='file7\x00', 0x42, 0x1ff)
unlinkat(r0, &(0x7f000001b2c0)='file7\x00', 0x0)
close(r1)

3.978275904s ago: executing program 3 (id=407):
syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240a03030000000000000014240201010200030000000000000000000000001324030201030001030000000000000000000009040100000102200009040101010102200017240102000000000100010000000000000002100000000624020102100905010900020100000a25010000000000000009040200000102200009040201010102200017240101000000000100010000000000000002100000000624020102100905820900020100000a250100000000000000"], 0x0)

3.912146106s ago: executing program 7 (id=408):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x100)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='rdma\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r5, &(0x7f0000000480)='ipv4\x00', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r6, &(0x7f0000000500)='127.0.0.1\x00', 0xa)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r7, &(0x7f0000000580)='4421\x00', 0x4)
symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
write(r8, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=127.0.0.1,trsvcid=4421\x00', 0x39)

3.849477237s ago: executing program 8 (id=409):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000005000), 0x88, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

3.195026308s ago: executing program 7 (id=411):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/size\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='256\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r3, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r4, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00")
ioctl(r4, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100")

2.833974716s ago: executing program 5 (id=412):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
write(r0, &(0x7f0000000780)='transport=loop,nqn=te', 0x15)

2.790983118s ago: executing program 7 (id=413):
r0 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x101})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/tun0/queues/rx-0/rps_cpus\x00', 0x2, 0x0)
io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000007c0)={'\x00', 0x400})

2.454270915s ago: executing program 8 (id=414):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='md0\x00', 0x3)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x81ff, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='raid1\x00', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r2, &(0x7f0000000800)='1\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a00)='1:0\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write(r4, &(0x7f0000000c00)='0\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
nanosleep(&(0x7f0000000f00)={0x1}, 0x0)

2.29399887s ago: executing program 2 (id=415):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)="020052487f00000100"/127, 0x7f)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)="020030397f00000100"/128, 0x80)
close(r2)
syz_io_uring_setup(0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)

2.138422612s ago: executing program 7 (id=416):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0)
nanosleep(&(0x7f0000000200)={0x1}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0)
ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20)
ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64)
ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20)
ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20)
ioctl(r0, 0xc058560f, &(0x7f0000000700)="0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500000000000000002c0100"/84)
ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20)

1.956322546s ago: executing program 2 (id=417):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='raid1\x00', 0x5)

1.915498175s ago: executing program 5 (id=418):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./backing0\x00', 0x42, 0x600)
fallocate(r1, 0x0, 0x0, 0x10000000)
r2 = syz_open_dev$loop(&(0x7f0000000b00), 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
mknodat(0xffffffffffffff9c, &(0x7f0000000c00)='./loop0\x00', 0x60600, 0x700)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000d00)={{0x0}, './loop0\x00'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./backing1\x00', 0x42, 0x600)
fallocate(r3, 0x0, 0x0, 0x10000000)
r4 = syz_open_dev$loop(&(0x7f0000000f00), 0x1, 0x0)
ioctl$LOOP_SET_FD(r4, 0x4c00, r3)
mknodat(0xffffffffffffff9c, &(0x7f0000001000)='./loop1\x00', 0x60600, 0x701)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001100)={{0x0}, './loop1\x00'})
r5 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./backing2\x00', 0x42, 0x600)
fallocate(r5, 0x0, 0x0, 0x10000000)
r6 = syz_open_dev$loop(&(0x7f0000001300), 0x2, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
mknodat(0xffffffffffffff9c, &(0x7f0000001400)='./loop2\x00', 0x60600, 0x702)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001500)={{0x0}, './loop2\x00'})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001600)={0x1, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1}})

1.774655848s ago: executing program 5 (id=419):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd)

1.720228524s ago: executing program 2 (id=420):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='rdma\x00', 0x4)
write(0xffffffffffffffff, &(0x7f0000000480)='ipv4\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='127.0.0.1\x00', 0xa)
write(0xffffffffffffffff, &(0x7f0000000580)='4421\x00', 0x4)
symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
write(r6, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=127.0.0.1,trsvcid=4421\x00', 0x39)

1.681018494s ago: executing program 5 (id=421):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/ep.0/direction\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='in\n', 0x3)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x0, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)
r5 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x1, 0x2)
write$midi(r5, &(0x7f0000000540)='hello', 0x5)
r6 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x2)
write$midi(r6, &(0x7f00000005c0)='hello', 0x5)

1.435460733s ago: executing program 0 (id=422):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd)

1.26588911s ago: executing program 8 (id=423):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/mycluster/node/mynode\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='127.0.0.1\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='7777\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='0\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r3, &(0x7f00000002c0)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='512\x00', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='0\x00', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r6, &(0x7f0000000480)='256\x00', 0x3)
openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r7, &(0x7f0000000540)='250:0\x00', 0x5)
syz_mount_image$ocfs2(&(0x7f0000004540), &(0x7f0000004580)='./file0\x00', 0x0, &(0x7f00000045c0), 0x1, 0x452c, &(0x7f0000004600)="$eJzs28tvVG0BB+D3DNW2yNevt++Dj0sZwGATk8kMK9GFBauExMjFy8JNM70A1WmnaadGEjeycuHGnSvigoULws6YsCAs/AN0656FC0iMmogSa2bmHDrnzAwd+Dotl+dJ4PS873kvnV/n9LzzQi5Wu7W8kV/eyJdX89WFGxvn8j+rVjZXlkJuj+z3+PSmHznJfv9c+dZ3vv+jcyH84ezvz25tbW2FutHQUanl63///RcLrcdELtOm3m/n3nbLj0MIk23zqjsQQrj6xxCiEMJYXDYeH4dDCIfi+f7rr7/689AuzebRVOHBk+cz1+4Pzt6Nbj+70/XCKITa+X/87fyd+79e+dM/7+3S8AAA8EqXrl/54dViKTyOwsjDgfbn9cPxsdvz8RY9+Wb/owQAAICuttf/o9GLDvt1yc5aly3BsLX1cf8nSd9c/t6V2W8XS/H+b9RW/7W46OmFA4091Oy+b3b/dyzTvvP+b/s4byqZXzLuaIhyhdR5LlcohFC62Dw/Eh3MVaobta/eqG6uLu7aNN5Z6fybu/epdAaah6cXBnrKfzzTf//3/yfafprq5/nd+xF7r6XzP9D1unu/jHrKfyLTbi/y582l82++2U+3XpBv3hPq+f9mYOf8JzP99yv/+jijUX2uQ6k7wIu4vNvzCmnp/L/QKEvdOuMXstv7/7+Z/D/J9L9f9//pi/0d9X2Rzv+LjbJ86ort9/9Ybuf3/6eZ/vcj//r8p/3+70k6/8FmYfrm2Xgle73/H87036/8Lw3H8xyJwkTLvzp9WP8VNrK9X91Y0tSr1/oxi3dfOv/2Xf7t9V+up+e/I5n2e7X+S8ZN1n/JOmQ6aq7/6Cyd/3Bb/evm/1mm/V7ln4wr/9eTzv9g1+t6vf8fzbTr++//aMgK8HNI5/+lrtf1mv+xTDv5v93S+R9qFnZYAPaa//FM//3Kv/HEN5Tkvz3h/w02y4vWfz1J5/9R1+t6zf9Epp33/9stnf9Is3Cg9YqZxt+N9X/Unvt/MvlPZfrfj/V/ff7T2f+ISEfp/OO93NfIP/v538lM//uW/+n+jvq+SOff/VPzev5/6WH9l8+063/+IRR91vfG0vlnd++39Zr/qUw7+b/d0vlnd++3Ne7/Qzvnn73t9jv/r/Sz8w9AOv/uT9K95n8m007+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvpvH4OBqiXCF1nssVCiFMxOdHwsFovrw4N1+pLvx0I4TJuDwfxqOblep8uTK3vFpdXJorVyrVhRA+iesnw1C0UanW5lbKa5++7Gs4urVUXq/NL5VrIYTDcfnx8FHS1/xybaW81rg2qfs4V11fu1VenVtcXv96sVgshs+61pXC0ZfzG4uWfl5bWq01Z9ZsGcKxV9SXGn0mfY9GLd9Yo/mJ7nWlqZff46HoJ9XN9dVypdHmZOfyUr6lr0p1oVxpGedUXPfl9rpSNseZ+Dh7+foPrn+3rTrko3TeidMtr0NtfXN1oVxbmqtUbyav05m4/ndRe337KOyXnfI/1SV/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MPz+BvnfxtCGGie5UII+eSLKP6TqJeFR1OFB0+ez1y7Pzh7N7r97E7mGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D+7cmzCIBRFAfT9EMgWIROkD2ksXMBxbJ3CygnEEcRlbO3tRPQ3biCcAw/evVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALid6f9rI+J5pEdEfPKTzsv2Lsb3d5jXoupfZZfqpblsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ26R+lgSCKA/CbsdBSe+vFatntbBVFbFwRPIHX8EC5QI6VInUgBJJZCPsH0iSk+L7mwfyYeQ/mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcnY+f7ve7aSNS3G1vI5bVojrOH0ttXqfv31xgRs7n86t7e2/a8u9plD+Xo9VL3qeb9f9fTNReO9iT4T4djPsMze3b3Hx93/tIuY6Ih5I/pZzr+rS3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAduzOsQ1AABQE0P8tYYNfM4WSSOxhLAvobUYlUSg0uveqSy6XHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDNMI/L1PVxZDRnZuy11bNv77C+7/P/iwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHMFAAD//5iWa4U=")
umount2(&(0x7f0000004580)='./file0\x00', 0x0)

1.069022418s ago: executing program 0 (id=424):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x100)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='rdma\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r5, &(0x7f0000000480)='ipv4\x00', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r6, &(0x7f0000000500)='127.0.0.1\x00', 0xa)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r7, &(0x7f0000000580)='4421\x00', 0x4)
symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
write(r8, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=127.0.0.1,trsvcid=4421\x00', 0x39)

923.352782ms ago: executing program 5 (id=425):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/io_uring_mock\x00', 0x2, 0x0)
dup2(r0, 0x0)
r1 = io_uring_setup(0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x10000000)
pipe2(&(0x7f0000003000)={<r2=>0x0, <r3=>0x0}, 0x0)
write(r3, &(0x7f0000004000)="2e00000000000000010000000000000000010020000000008000"/64, 0x40)
read(r2, &(0x7f0000002000)=""/64, 0x40)
write(r3, &(0x7f0000004040)="01000000", 0x4)
read(r2, &(0x7f0000001040)=""/4, 0x4)
io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0)

731.941192ms ago: executing program 2 (id=426):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/size\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='256\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r3, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r4, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00")
ioctl(r4, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100")

618.010236ms ago: executing program 3 (id=427):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='freeze', 0x6)

519.90094ms ago: executing program 5 (id=428):
r0 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x101})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/tun0/queues/rx-0/rps_cpus\x00', 0x2, 0x0)
io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000007c0)={'\x00', 0x400})

54.809506ms ago: executing program 2 (id=429):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)="020052487f00000100"/127, 0x7f)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)="020030397f00000100"/128, 0x80)
close(r2)
syz_io_uring_setup(0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)

0s ago: executing program 0 (id=430):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='clientaddr=127.0.0.1\x00'])

kernel console output (not intermixed with test programs):

D.0002: failed to set rmi mode
[  108.746566][   T29] hid-rmi 0003:1532:011D.0002: hiddev0,hidraw0: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.2-1/input0
[  108.781532][ T5857]  (null): failure reading functionality
[  108.823745][ T5857] i2c i2c-1: failure reading functionality
[  108.830542][   T29] usb 3-1: USB disconnect, device number 2
[  108.855656][ T5922] loop0: detected capacity change from 0 to 8192
[  108.894382][ T5857] i2c i2c-1: connected i2c-tiny-usb device
[  108.950872][ T5857] usb 2-1: USB disconnect, device number 2
[  108.997067][ T5925] fido_id[5925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  109.178509][ T5922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  109.768892][   T10] lo speed is unknown, defaulting to 1000
[  109.780690][ T5918] infiniband syz0: set active
[  109.786180][ T5918] infiniband syz0: added lo
[  109.799506][ T5918] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  109.820851][ T5918] infiniband syz0: Couldn't open port 1
[  109.848408][ T5918] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  109.868075][ T5918] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  109.886891][ T5918] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  109.945560][ T5918] RDS/IB: syz0: added
[  109.950019][ T5918] smc: adding ib device syz0 with port count 1
[  109.962856][ T5750] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  109.982034][ T5918] smc:    ib device syz0 port 1 has no pnetid
[  110.002319][   T10] lo speed is unknown, defaulting to 1000
[  110.017995][ T5918] lo speed is unknown, defaulting to 1000
[  110.145334][ T5750] usb 1-1: config 1 interface 1 has no altsetting 1
[  110.156211][ T5750] usb 1-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00
[  110.187258][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.347071][ T5634] gspca_zc3xx: reg_r err -71
[  110.436735][ T5931] loop2: detected capacity change from 0 to 32768
[  110.506168][ T5931] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  110.616640][ T5931] XFS (loop2): Ending clean mount
[  110.736376][ T5918] lo speed is unknown, defaulting to 1000
[  110.851857][ T5622] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  110.941803][ T5634] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  110.952893][ T5634] gspca_zc3xx 6-1:1.0: probe with driver gspca_zc3xx failed with error -71
[  111.010890][ T5634] usb 6-1: USB disconnect, device number 2
[  111.813338][ T5750] usb 1-1: USB disconnect, device number 2
[  111.933712][ T5854] hid-rmi 0003:1532:011D.0001: unable to set rmi mode to 1 (-110)
[  111.965452][ T5854] hid-rmi 0003:1532:011D.0001: failed to set rmi mode
[  111.976540][ T5918] lo speed is unknown, defaulting to 1000
[  112.088975][ T5854] hid-rmi 0003:1532:011D.0001: hiddev0,hidraw0: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.3-1/input0
[  112.349659][   T10] usb 4-1: USB disconnect, device number 2
[  112.427311][ T5953] loop5: detected capacity change from 0 to 32768
[  112.458341][ T5953] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.24 (5953)
[  112.553840][ T5953] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  112.584590][ T5963] device-mapper: table: 248:0: too large device
[  112.592554][ T5953] BTRFS info (device loop5): using crc32c checksum algorithm
[  112.600445][ T5963] device-mapper: ioctl: error adding target to table
[  112.740589][   T30] audit: type=1800 audit(1785865985.464:8): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.28" name="ipv4_address" dev="configfs" ino=9635 res=0 errno=0
[  112.844222][ T5953] BTRFS info (device loop5): enabling ssd optimizations
[  112.851229][ T5953] BTRFS info (device loop5): turning on async discard
[  112.889097][ T5953] BTRFS info (device loop5): enabling free space tree
[  113.200694][ T5984] loop0: detected capacity change from 0 to 8192
[  113.237401][ T5984] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  113.344688][   T36] nvme nvme0: rdma_resolve_route failed (-110).
[  113.399124][ T5986] nvme nvme0: rdma connection establishment failed (-19)
[  113.416349][ T5623] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  113.606491][ T5955] lo speed is unknown, defaulting to 1000
[  113.980200][ T6000] device-mapper: table: 248:0: too large device
[  113.998419][ T6000] device-mapper: ioctl: error adding target to table
[  114.346135][ T5918] lo speed is unknown, defaulting to 1000
[  114.421803][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  114.596644][   T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  114.616861][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.644234][   T10] usb 2-1: Product: syz
[  114.652157][   T10] usb 2-1: Manufacturer: syz
[  114.667236][   T10] usb 2-1: SerialNumber: syz
[  114.745615][   T10] usb 2-1: 1:1 : unsupported format bits 0x20000
[  114.928515][   T10] usb 2-1: 2:1 : unsupported format bits 0x20000
[  115.139987][ T5918] lo speed is unknown, defaulting to 1000
[  115.235512][ T6011] loop5: detected capacity change from 0 to 32768
[  115.294587][ T6011] (syz.5.38,6011,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[  115.325035][ T6011] (syz.5.38,6011,0):ocfs2_fill_super:1177 ERROR: status = -22
[  115.903812][ T5918] lo speed is unknown, defaulting to 1000
[  116.050637][ T6022] device-mapper: table: 248:0: too large device
[  116.066903][ T6022] device-mapper: ioctl: error adding target to table
[  116.292677][   T10] usb 2-1: USB disconnect, device number 3
[  116.309623][ T6025] loop5: detected capacity change from 0 to 2048
[  116.374978][ T6025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.577806][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.840249][ T5982] siw: device registration error -23
[  117.431778][   T30] audit: type=1800 audit(1785865990.154:9): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="attr_allow_any_host" dev="configfs" ino=10256 res=0 errno=0
[  117.521253][   T30] audit: type=1800 audit(1785865990.164:10): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="device_path" dev="configfs" ino=10257 res=0 errno=0
[  117.543087][ T6038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.608321][   T30] audit: type=1800 audit(1785865990.164:11): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="buffered_io" dev="configfs" ino=10258 res=0 errno=0
[  117.672793][ T6036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.693543][   T30] audit: type=1800 audit(1785865990.164:12): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="enable" dev="configfs" ino=10259 res=0 errno=0
[  117.737606][   T12] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:f3f04de6-fea1-40e9-ba81-dd810578b99b.
[  117.751894][   T30] audit: type=1800 audit(1785865990.194:13): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="addr_trtype" dev="configfs" ino=10260 res=0 errno=0
[  117.775358][ T6037] loop0: detected capacity change from 0 to 8192
[  117.812818][ T6037] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  117.842521][ T6041] nvme nvme0: creating 2 I/O queues.
[  117.897524][ T6041] nvme nvme0: new ctrl: "testnqn"
[  118.911801][ T5634] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  119.095833][ T5634] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00
[  119.128923][ T5634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.148037][ T6059] NFSD: Failed to start, no listeners configured.
[  119.465871][ T6066] device-mapper: table: 248:0: too large device
[  119.475485][ T6051] loop3: detected capacity change from 0 to 32768
[  119.493650][ T6066] device-mapper: ioctl: error adding target to table
[  119.565459][ T6051] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  119.732027][ T6051] XFS (loop3): Ending clean mount
[  119.824505][ T6083] siw: device registration error -23
[  119.869659][   T30] audit: type=1800 audit(1785865992.594:14): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.57" name="attr_allow_any_host" dev="configfs" ino=10377 res=0 errno=0
[  119.895635][ T6083] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  119.936515][ T6082] NFSD: Failed to start, no listeners configured.
[  119.960953][ T6083] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  119.971889][   T30] audit: type=1800 audit(1785865992.594:15): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.57" name="device_path" dev="configfs" ino=10378 res=0 errno=0
[  120.058701][ T5626] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  120.081107][   T30] audit: type=1800 audit(1785865992.594:16): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.57" name="enable" dev="configfs" ino=10380 res=0 errno=0
[  120.143131][   T30] audit: type=1800 audit(1785865992.594:17): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.57" name="addr_trtype" dev="configfs" ino=10381 res=0 errno=0
[  120.208302][   T30] audit: type=1800 audit(1785865992.684:18): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.57" name="addr_traddr" dev="configfs" ino=10385 res=0 errno=0
[  120.255499][   T36] nvme nvme1: rdma_resolve_route failed (-110).
[  120.283023][ T6083] nvme nvme1: rdma connection establishment failed (-19)
[  120.722890][ T6095] siw: device registration error -23
[  120.752386][ T6095] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  120.780266][ T6095] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  120.804283][ T6095] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  120.841827][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  120.953081][ T5634] hid-rmi 0003:1532:011D.0003: unable to set rmi mode to 1 (-71)
[  120.978689][ T5634] hid-rmi 0003:1532:011D.0003: failed to set rmi mode
[  121.023987][ T5634] hid-rmi 0003:1532:011D.0003: hiddev0,hidraw0: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.4-1/input0
[  121.024696][    T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00
[  121.085820][ T5634] usb 5-1: USB disconnect, device number 2
[  121.096339][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.147497][    T9] usb 1-1: config 0 descriptor??
[  121.284839][ T6105] loop5: detected capacity change from 0 to 2048
[  121.325852][ T6105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.341643][ T6104] fido_id[6104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  121.676954][ T6112] device-mapper: table: 248:0: too large device
[  121.697146][ T6112] device-mapper: ioctl: error adding target to table
[  121.723535][    T9] corsair-psu 0003:1B1C:1C03.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.0-1/input0
[  122.000404][ T6122] siw: device registration error -23
[  122.129732][ T6122] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  122.164709][   T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  122.202213][ T6122] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  122.227294][ T6122] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  122.251294][ T6122] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  122.345666][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  122.367565][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  122.403863][   T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  122.443204][   T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023
[  122.461589][ T1011] nvme nvme1: rdma_resolve_route failed (-110).
[  122.485167][   T10] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  122.499543][ T6122] nvme nvme1: rdma connection establishment failed (-19)
[  122.512089][ T6131] lo speed is unknown, defaulting to 1000
[  122.519625][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.535486][   T10] usb 4-1: Product: syz
[  122.550751][   T10] usb 4-1: Manufacturer: syz
[  122.566992][   T10] usb 4-1: SerialNumber: syz
[  122.848270][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  122.848309][   T30] audit: type=1800 audit(1785865995.574:34): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.74" name="attr_allow_any_host" dev="configfs" ino=9859 res=0 errno=0
[  122.904171][ T6137] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  122.934111][   T30] audit: type=1800 audit(1785865995.614:35): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.74" name="device_path" dev="configfs" ino=9861 res=0 errno=0
[  122.935938][ T6137] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  122.995492][   T30] audit: type=1800 audit(1785865995.614:36): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.74" name="enable" dev="configfs" ino=9862 res=0 errno=0
[  123.065404][   T30] audit: type=1800 audit(1785865995.624:37): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.74" name="addr_trtype" dev="configfs" ino=10508 res=0 errno=0
[  123.133198][   T30] audit: type=1800 audit(1785865995.664:38): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.74" name="addr_traddr" dev="configfs" ino=10509 res=0 errno=0
[  123.224255][  T139] nvme nvme1: rdma_resolve_route failed (-110).
[  123.252239][ T6137] nvme nvme1: rdma connection establishment failed (-19)
[  123.451481][ T6136] siw: device registration error -23
[  123.883046][ T6132] NFSD: Unable to initialize client recovery tracking! (-110)
[  123.906173][ T6132] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  123.948135][ T6132] NFSD: starting 90-second grace period (net f000053e)
[  124.058902][    T9] usb 1-1: USB disconnect, device number 3
[  124.103816][   T10] usb 4-1: USB disconnect, device number 3
[  124.478649][ T6149] udevd[6149]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.510650][ T6148] svc: failed to register nfsdv3 RPC service (errno 111).
[  124.546660][ T6148] svc: failed to register nfsaclv3 RPC service (errno 111).
[  124.695615][ T6152] siw: device registration error -23
[  124.729903][   T30] audit: type=1800 audit(1785865997.454:39): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.79" name="attr_allow_any_host" dev="configfs" ino=9891 res=0 errno=0
[  124.756950][ T6152] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  124.811506][   T30] audit: type=1800 audit(1785865997.484:40): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.79" name="device_path" dev="configfs" ino=9892 res=0 errno=0
[  124.819075][ T6152] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  124.873179][ T6152] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  124.907577][   T30] audit: type=1800 audit(1785865997.484:41): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.79" name="enable" dev="configfs" ino=9893 res=0 errno=0
[  124.993062][   T30] audit: type=1800 audit(1785865997.484:42): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.79" name="addr_trtype" dev="configfs" ino=9894 res=0 errno=0
[  125.076986][   T30] audit: type=1800 audit(1785865997.534:43): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.79" name="addr_adrfam" dev="configfs" ino=10576 res=0 errno=0
[  125.371895][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  127.834199][ T6180] siw: device registration error -23
[  127.872325][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  127.872347][   T30] audit: type=1800 audit(1785866000.594:46): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.87" name="attr_allow_any_host" dev="configfs" ino=9925 res=0 errno=0
[  127.884350][ T6180] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  127.980947][   T30] audit: type=1800 audit(1785866000.604:47): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.87" name="device_path" dev="configfs" ino=9926 res=0 errno=0
[  128.037156][ T6180] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  128.057976][   T30] audit: type=1800 audit(1785866000.604:48): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.87" name="enable" dev="configfs" ino=9927 res=0 errno=0
[  128.149336][   T30] audit: type=1800 audit(1785866000.614:49): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.87" name="addr_trtype" dev="configfs" ino=9928 res=0 errno=0
[  128.210873][ T6192] device-mapper: table: 248:1: zero-length target
[  128.221437][   T30] audit: type=1800 audit(1785866000.754:50): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.87" name="addr_traddr" dev="configfs" ino=9935 res=0 errno=0
[  128.273503][ T6192] device-mapper: ioctl: error adding target to table
[  128.357342][   T12] nvme nvme1: rdma_resolve_route failed (-110).
[  128.389098][ T6180] nvme nvme1: rdma connection establishment failed (-19)
[  128.687712][   T30] audit: type=1800 audit(1785866001.414:51): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.91" name="attr_allow_any_host" dev="configfs" ino=10644 res=0 errno=0
[  128.719883][ T6196] nvmet: disable ns before setting buffered_io value.
[  128.746731][   T30] audit: type=1800 audit(1785866001.434:52): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.91" name="device_path" dev="configfs" ino=9954 res=0 errno=0
[  128.760701][ T6196] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  128.813601][   T30] audit: type=1800 audit(1785866001.444:53): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.91" name="buffered_io" dev="configfs" ino=9955 res=0 errno=0
[  128.874273][   T30] audit: type=1800 audit(1785866001.474:54): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.91" name="enable" dev="configfs" ino=9956 res=0 errno=0
[  128.934105][   T30] audit: type=1800 audit(1785866001.484:55): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.91" name="addr_trtype" dev="configfs" ino=9957 res=0 errno=0
[  129.021842][   T12] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:f3f04de6-fea1-40e9-ba81-dd810578b99b.
[  129.076251][ T6196] nvme nvme1: creating 2 I/O queues.
[  129.113276][ T6196] nvme nvme1: new ctrl: "testnqn"
[  129.271997][ T6187] NFSD: Unable to initialize client recovery tracking! (-110)
[  129.288133][ T6187] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  129.318832][ T6187] NFSD: starting 90-second grace period (net f00003cb)
[  129.572855][ T6204] siw: device registration error -23
[  129.684002][ T6205] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  129.748720][ T6205] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  129.800900][ T6204] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  129.864652][ T6204] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  129.900110][ T6210] device-mapper: table: 248:0: too large device
[  129.932516][ T6210] device-mapper: ioctl: error adding target to table
[  130.143621][   T36] nvme nvme2: rdma_resolve_route failed (-110).
[  130.175361][ T6204] nvme nvme2: rdma connection establishment failed (-19)
[  132.214909][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  132.225130][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  132.743154][ T6208] NFSD: Unable to initialize client recovery tracking! (-110)
[  132.769419][ T6208] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  132.787815][ T6208] NFSD: starting 90-second grace period (net f00004d6)
[  132.866526][ T6239] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  132.894896][ T6239] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  132.904896][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  132.904918][   T30] audit: type=1800 audit(1785866005.624:68): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.103" name="addr_traddr" dev="configfs" ino=10770 res=0 errno=0
[  133.102023][ T1105] nvme nvme2: rdma_resolve_route failed (-110).
[  133.151291][ T6239] nvme nvme2: rdma connection establishment failed (-19)
[  133.305716][  T186] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  133.470174][   T30] audit: type=1800 audit(1785866006.194:69): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.107" name="attr_allow_any_host" dev="configfs" ino=10803 res=0 errno=0
[  133.523136][ T6244] nvmet: disable ns before setting buffered_io value.
[  133.532665][  T186] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  133.543659][  T186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.566092][  T186] usb 5-1: Product: syz
[  133.571225][   T30] audit: type=1800 audit(1785866006.234:70): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.107" name="device_path" dev="configfs" ino=10804 res=0 errno=0
[  133.593509][ T6244] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  133.604119][  T186] usb 5-1: Manufacturer: syz
[  133.621792][  T186] usb 5-1: SerialNumber: syz
[  133.649216][  T186] usb 5-1: 1:1 : unsupported format bits 0x20000
[  133.652305][   T30] audit: type=1800 audit(1785866006.244:71): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.107" name="buffered_io" dev="configfs" ino=10807 res=0 errno=0
[  133.751552][   T30] audit: type=1800 audit(1785866006.284:72): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.107" name="enable" dev="configfs" ino=10808 res=0 errno=0
[  133.811329][   T77] nvmet: Created nvm controller 3 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:f3f04de6-fea1-40e9-ba81-dd810578b99b.
[  133.842719][   T30] audit: type=1800 audit(1785866006.294:73): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.107" name="addr_trtype" dev="configfs" ino=10809 res=0 errno=0
[  133.877354][  T186] usb 5-1: 2:1 : unsupported format bits 0x20000
[  133.892143][ T6244] nvme nvme2: creating 2 I/O queues.
[  133.937952][ T6244] nvme nvme2: new ctrl: "testnqn"
[  134.438354][ T6259] device-mapper: table: 248:0: too large device
[  134.459689][ T6259] device-mapper: ioctl: error adding target to table
[  134.761362][ T6267] siw: device registration error -23
[  134.834137][   T30] audit: type=1800 audit(1785866007.554:74): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.112" name="local" dev="configfs" ino=10090 res=0 errno=0
[  135.061716][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  135.202151][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  136.975129][ T6270] nvme nvme3: rdma connection establishment failed (-512)
[  137.040973][  T186] usb 5-1: USB disconnect, device number 3
[  137.079005][   T77] nvme nvme3: rdma_resolve_route failed (-110).
[  137.362169][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.848365][ T6282] svc: failed to register nfsdv3 RPC service (errno 111).
[  137.895948][ T6282] svc: failed to register nfsaclv3 RPC service (errno 111).
[  137.945820][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  137.957137][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  137.969364][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  137.983060][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  137.985315][ T6286] rdma_rxe: rxe_newlink: failed to add veth0
[  138.011062][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  138.096460][   T30] audit: type=1800 audit(1785866010.814:75): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.120" name="attr_allow_any_host" dev="configfs" ino=10918 res=0 errno=0
[  138.171230][ T6290] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  138.221127][ T6288] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  138.245544][   T30] audit: type=1800 audit(1785866010.864:76): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.120" name="device_path" dev="configfs" ino=10921 res=0 errno=0
[  138.357823][   T30] audit: type=1800 audit(1785866010.864:77): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.120" name="enable" dev="configfs" ino=10922 res=0 errno=0
[  138.456821][   T30] audit: type=1800 audit(1785866010.874:78): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.120" name="addr_trtype" dev="configfs" ino=10923 res=0 errno=0
[  138.538929][   T30] audit: type=1800 audit(1785866010.944:79): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.120" name="addr_traddr" dev="configfs" ino=10169 res=0 errno=0
[  138.617468][   T77] nvme nvme3: rdma_resolve_route failed (-110).
[  138.650930][ T6288] nvme nvme3: rdma connection establishment failed (-19)
[  138.757443][ T6301] device-mapper: table: 248:0: too large device
[  138.783025][ T6301] device-mapper: ioctl: error adding target to table
[  139.055899][   T30] audit: type=1800 audit(1785866011.774:80): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.125" name="attr_allow_any_host" dev="configfs" ino=10201 res=0 errno=0
[  139.069579][ T6307] nvmet: disable ns before setting buffered_io value.
[  139.161305][   T30] audit: type=1800 audit(1785866011.794:81): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.125" name="device_path" dev="configfs" ino=10202 res=0 errno=0
[  139.200836][ T6307] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  139.230288][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.266177][   T30] audit: type=1800 audit(1785866011.794:82): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.125" name="buffered_io" dev="configfs" ino=10203 res=0 errno=0
[  139.326703][   T30] audit: type=1800 audit(1785866011.904:83): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.125" name="enable" dev="configfs" ino=10206 res=0 errno=0
[  139.359466][   T30] audit: type=1800 audit(1785866011.914:84): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.126" name="local" dev="configfs" ino=10207 res=0 errno=0
[  141.179501][ T5633] Bluetooth: hci6: command tx timeout
[  141.227622][ T1011] nvmet: Created nvm controller 4 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:f3f04de6-fea1-40e9-ba81-dd810578b99b.
[  141.266459][ T6307] nvme nvme3: creating 2 I/O queues.
[  141.281028][ T6307] nvme nvme3: new ctrl: "testnqn"
[  141.529249][ T6323] siw: device registration error -23
[  141.548329][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.764424][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.837935][ T1112] nvme nvme4: rdma_resolve_route failed (-110).
[  141.856821][ T6283] lo speed is unknown, defaulting to 1000
[  141.869838][ T6324] nvme nvme4: rdma connection establishment failed (-19)
[  141.907276][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.942350][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  142.051781][ T5857] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  142.128248][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  142.147768][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.175935][   T10] usb 5-1: Product: syz
[  142.187346][   T10] usb 5-1: Manufacturer: syz
[  142.196989][   T10] usb 5-1: SerialNumber: syz
[  142.238663][ T5857] usb 4-1: not running at top speed; connect to a high speed hub
[  142.291658][ T5857] usb 4-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice= 1.00
[  142.307338][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.310942][   T10] usb 5-1: 1:1 : unsupported format bits 0x20000
[  142.317777][ T5857] usb 4-1: Product: syz
[  142.322939][ T6336] svc: failed to register nfsdv3 RPC service (errno 111).
[  142.330927][ T5857] usb 4-1: Manufacturer: syz
[  142.341305][ T5857] usb 4-1: SerialNumber: syz
[  142.349621][ T6336] svc: failed to register nfsaclv3 RPC service (errno 111).
[  142.402971][ T5857] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c
[  142.455093][   T10] usb 5-1: 2:1 : unsupported format bits 0x20000
[  142.503777][   T12] bridge_slave_1: left allmulticast mode
[  142.528237][   T12] bridge_slave_1: left promiscuous mode
[  142.568093][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.660932][   T12] bridge_slave_0: left allmulticast mode
[  142.695121][   T12] bridge_slave_0: left promiscuous mode
[  142.714690][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.851485][ T6346] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  142.901954][ T6346] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  143.207215][ T1105] nvme nvme4: rdma_resolve_route failed (-110).
[  143.213836][ T5633] Bluetooth: hci6: command tx timeout
[  143.228850][ T6346] nvme nvme4: rdma connection establishment failed (-19)
[  143.629760][ T6357] device-mapper: table: 248:0: too large device
[  143.629791][ T6357] device-mapper: ioctl: error adding target to table
[  143.800732][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.861669][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.919777][   T10] usb 5-1: USB disconnect, device number 4
[  143.929138][   T12] bond0 (unregistering): Released all slaves
[  144.042609][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  144.042634][   T30] audit: type=1800 audit(1785866016.774:91): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.140" name="local" dev="configfs" ino=11090 res=0 errno=0
[  144.048449][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.355305][   T30] audit: type=1800 audit(1785866017.084:92): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="attr_allow_any_host" dev="configfs" ino=11497 res=0 errno=0
[  144.369622][ T6376] nvmet: disable ns before setting buffered_io value.
[  144.434012][   T30] audit: type=1800 audit(1785866017.094:93): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="device_path" dev="configfs" ino=11498 res=0 errno=0
[  144.861728][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  144.891732][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  145.611734][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  145.701720][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  145.871721][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  146.001726][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  146.081715][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  146.447936][ T5633] Bluetooth: hci6: command tx timeout
[  146.449603][ T5857] gspca_zc3xx: reg_r err -110
[  146.572628][ T6376] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  146.603166][   T30] audit: type=1800 audit(1785866017.094:94): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="buffered_io" dev="configfs" ino=11499 res=0 errno=0
[  146.742618][   T30] audit: type=1800 audit(1785866019.274:95): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="enable" dev="configfs" ino=11505 res=0 errno=0
[  146.763103][   T30] audit: type=1800 audit(1785866019.284:96): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="addr_trtype" dev="configfs" ino=11506 res=0 errno=0
[  146.817425][ T6385] siw: device registration error -23
[  146.968527][  T139] nvmet: Created nvm controller 5 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:f3f04de6-fea1-40e9-ba81-dd810578b99b.
[  147.039432][ T6376] nvme nvme4: creating 2 I/O queues.
[  147.073604][ T6376] nvme nvme4: new ctrl: "testnqn"
[  147.111756][ T5857] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  147.136485][ T5857] gspca_zc3xx 4-1:1.0: probe with driver gspca_zc3xx failed with error -110
[  147.214513][ T5857] usb 4-1: USB disconnect, device number 4
[  147.459659][   T36] nvme nvme5: rdma_resolve_route failed (-110).
[  147.496142][ T6388] nvme nvme5: rdma connection establishment failed (-19)
[  147.550310][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  147.600414][   T30] audit: type=1800 audit(1785866020.324:97): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.148" name="attr_allow_any_host" dev="configfs" ino=11237 res=0 errno=0
[  147.620078][ T6400] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  147.716776][   T30] audit: type=1800 audit(1785866020.324:98): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.148" name="device_path" dev="configfs" ino=11240 res=0 errno=0
[  147.727565][ T6400] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  147.807634][   T30] audit: type=1800 audit(1785866020.324:99): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.148" name="enable" dev="configfs" ino=11241 res=0 errno=0
[  147.892822][   T30] audit: type=1800 audit(1785866020.324:100): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.148" name="addr_trtype" dev="configfs" ino=11242 res=0 errno=0
[  148.053308][ T6390] loop3: detected capacity change from 0 to 32768
[  148.139421][ T6390] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  148.155483][ T1105] nvme nvme5: rdma_resolve_route failed (-110).
[  148.201369][ T6399] nvme nvme5: rdma connection establishment failed (-19)
[  148.442938][ T6390] XFS (loop3): Ending clean mount
[  148.491910][ T5633] Bluetooth: hci6: command tx timeout
[  148.780442][ T6425] device-mapper: table: 248:0: too large device
[  148.809739][ T5626] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  148.826593][ T6425] device-mapper: ioctl: error adding target to table
[  151.056802][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  151.056833][   T30] audit: type=1800 audit(1785866023.774:102): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.154" name="local" dev="configfs" ino=11608 res=0 errno=0
[  151.416559][   T30] audit: type=1800 audit(1785866024.144:103): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.159" name="attr_allow_any_host" dev="configfs" ino=11624 res=0 errno=0
[  151.442358][ T6449] nvmet: disable ns before setting buffered_io value.
[  151.495022][ T6449] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  151.528588][   T12] hsr_slave_0: left promiscuous mode
[  151.546473][   T30] audit: type=1800 audit(1785866024.174:104): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.159" name="device_path" dev="configfs" ino=11625 res=0 errno=0
[  151.598874][   T12] hsr_slave_1: left promiscuous mode
[  151.604522][ T5854] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  151.637306][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.668327][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.682212][   T30] audit: type=1800 audit(1785866024.174:105): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.159" name="buffered_io" dev="configfs" ino=11626 res=0 errno=0
[  151.727299][ T6457] siw: device registration error -23
[  151.728131][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.763719][   T30] audit: type=1800 audit(1785866024.204:106): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.159" name="enable" dev="configfs" ino=11630 res=0 errno=0
[  151.787134][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.809881][ T6441] nvmet: Created nvm controller 6 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:f3f04de6-fea1-40e9-ba81-dd810578b99b.
[  151.827641][ T5854] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  151.848532][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.872449][   T30] audit: type=1800 audit(1785866024.214:107): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.159" name="addr_trtype" dev="configfs" ino=11632 res=0 errno=0
[  151.878116][ T6449] nvme nvme5: creating 2 I/O queues.
[  151.910423][ T5854] usb 3-1: Product: syz
[  151.928301][ T5854] usb 3-1: Manufacturer: syz
[  151.948926][ T5854] usb 3-1: SerialNumber: syz
[  151.968034][   T12] veth1_macvtap: left promiscuous mode
[  151.974704][ T6449] nvme nvme5: new ctrl: "testnqn"
[  151.982337][   T12] veth0_macvtap: left promiscuous mode
[  151.997488][   T12] veth1_vlan: left promiscuous mode
[  152.009129][ T5854] usb 3-1: 1:1 : unsupported format bits 0x20000
[  152.016628][   T12] veth0_vlan: left promiscuous mode
[  152.218093][   T57] nvme nvme6: rdma_resolve_route failed (-110).
[  152.234966][ T5854] usb 3-1: 2:1 : unsupported format bits 0x20000
[  152.263693][ T6459] nvme nvme6: rdma connection establishment failed (-19)
[  152.910928][   T30] audit: type=1800 audit(1785866025.634:108): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.164" name="attr_allow_any_host" dev="configfs" ino=12365 res=0 errno=0
[  152.955711][ T6481] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  152.980533][ T6481] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  152.999955][   T30] audit: type=1800 audit(1785866025.674:109): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.164" name="device_path" dev="configfs" ino=12367 res=0 errno=0
[  153.053711][   T30] audit: type=1800 audit(1785866025.674:110): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.164" name="enable" dev="configfs" ino=12368 res=0 errno=0
[  153.125088][   T30] audit: type=1800 audit(1785866025.674:111): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.164" name="addr_trtype" dev="configfs" ino=12369 res=0 errno=0
[  153.253779][ T1166] nvme nvme6: rdma_resolve_route failed (-110).
[  153.267119][   T12] team0 (unregistering): Port device team_slave_1 removed
[  153.277384][ T6481] nvme nvme6: rdma connection establishment failed (-19)
[  153.328526][   T12] team0 (unregistering): Port device team_slave_0 removed
[  153.537571][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  153.590030][ T6486] device-mapper: table: 248:0: too large device
[  153.605497][ T6486] device-mapper: ioctl: error adding target to table
[  153.672940][ T5854] usb 3-1: USB disconnect, device number 3
[  153.737670][   T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=3101, bcdDevice= 0.00
[  153.762374][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.865209][   T10] dvb-usb: found a 'DVBWorld DVB-C 3101 USB2.0' in cold state, will try to load a firmware
[  155.833662][   T10] usb 4-1: Direct firmware load for dvb-usb-dw3101.fw failed with error -2
[  155.843305][   T10] usb 4-1: Falling back to sysfs fallback for: dvb-usb-dw3101.fw
[  156.023675][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  156.196907][ T6506] siw: device registration error -23
[  156.197022][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.235372][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.252227][ T6283] bridge_slave_0: entered allmulticast mode
[  156.283363][ T6283] bridge_slave_0: entered promiscuous mode
[  156.323424][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.362610][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.390063][ T6283] bridge_slave_1: entered allmulticast mode
[  156.405289][ T6283] bridge_slave_1: entered promiscuous mode
[  156.481151][ T1166] nvme nvme6: rdma_resolve_route failed (-110).
[  156.509277][ T6507] nvme nvme6: rdma connection establishment failed (-19)
[  156.580921][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.632036][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.783768][ T1112] nvmet: Created nvm controller 7 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:f3f04de6-fea1-40e9-ba81-dd810578b99b.
[  156.832987][ T6511] nvme nvme6: creating 2 I/O queues.
[  156.841513][ T6283] team0: Port device team_slave_0 added
[  156.860010][ T6511] nvme nvme6: new ctrl: "testnqn"
[  156.871338][ T6283] team0: Port device team_slave_1 added
[  157.072926][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.106737][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.148138][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.189028][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.205451][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.264426][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  157.264448][   T30] audit: type=1800 audit(1785866029.974:114): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="attr_allow_any_host" dev="configfs" ino=11814 res=0 errno=0
[  157.300019][ T6531] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  157.342201][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.355796][ T6528] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  157.389003][   T30] audit: type=1800 audit(1785866029.984:115): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="device_path" dev="configfs" ino=11815 res=0 errno=0
[  157.473546][   T30] audit: type=1800 audit(1785866030.024:116): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="enable" dev="configfs" ino=11817 res=0 errno=0
[  157.510689][ T6540] device-mapper: table: 248:0: too large device
[  157.532230][ T6540] device-mapper: ioctl: error adding target to table
[  157.597831][   T30] audit: type=1800 audit(1785866030.024:117): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="addr_trtype" dev="configfs" ino=11818 res=0 errno=0
[  157.652603][ T6283] hsr_slave_0: entered promiscuous mode
[  157.671637][ T6283] hsr_slave_1: entered promiscuous mode
[  157.689429][ T1105] nvme nvme7: rdma_resolve_route failed (-110).
[  157.701976][   T30] audit: type=1800 audit(1785866030.094:118): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="addr_traddr" dev="configfs" ino=11819 res=0 errno=0
[  157.723631][ T6283] debugfs: 'hsr0' already exists in 'hsr'
[  157.750439][ T6283] Cannot create hsr debugfs directory
[  157.757871][ T6528] nvme nvme7: rdma connection establishment failed (-19)
[  158.160132][   T30] audit: type=1800 audit(1785866030.884:119): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.184" name="local" dev="configfs" ino=11866 res=0 errno=0
[  158.511819][ T5857] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  158.704382][ T5857] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  158.746138][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.786405][ T5857] usb 1-1: Product: syz
[  158.810995][ T5857] usb 1-1: Manufacturer: syz
[  158.843177][ T5857] usb 1-1: SerialNumber: syz
[  158.861303][ T6563] siw: device registration error -23
[  158.928956][ T5857] usb 1-1: 1:1 : unsupported format bits 0x20000
[  160.420512][ T5857] usb 1-1: 2:1 : unsupported format bits 0x20000
[  160.774282][ T6563] nvme nvme7: rdma connection establishment failed (-512)
[  160.788059][   T57] nvme nvme7: rdma_resolve_route failed (-110).
[  161.181611][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  161.327265][ T6283] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  161.374370][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  161.385040][ T6283] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  161.398406][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  161.407937][ T6283] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  161.425114][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  161.436742][ T6283] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  161.461905][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  161.582117][   T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  161.701040][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.752486][   T29] usb 6-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00
[  161.787800][ T6283] 8021q: adding VLAN 0 to HW filter on device team0
[  161.790544][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.807856][ T5857] usb 1-1: USB disconnect, device number 4
[  161.832424][   T29] usb 6-1: Product: syz
[  161.842244][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.849441][ T6441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.868581][   T29] usb 6-1: Manufacturer: syz
[  161.877503][   T29] usb 6-1: SerialNumber: syz
[  161.924483][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.931751][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.947904][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.975145][   T29] gspca_main: spca500-2.14.0 probing 046d:0900
[  162.402214][ T6577] NFSD: Unable to initialize client recovery tracking! (-110)
[  162.418713][ T6577] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  162.429059][ T6577] NFSD: starting 90-second grace period (net f00003cb)
[  162.486138][   T30] audit: type=1800 audit(1785866035.214:120): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.196" name="attr_allow_any_host" dev="configfs" ino=12050 res=0 errno=0
[  162.524291][ T6604] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  162.535719][   T29] gspca_spca500: reg write: error -32
[  162.543651][ T6604] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  162.553021][   T30] audit: type=1800 audit(1785866035.244:121): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.196" name="device_path" dev="configfs" ino=12051 res=0 errno=0
[  162.574458][   T29] gspca_spca500: reg write: error -32
[  162.589462][   T29] gspca_spca500: reg write: error -32
[  162.598054][   T30] audit: type=1800 audit(1785866035.244:122): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.196" name="enable" dev="configfs" ino=12052 res=0 errno=0
[  162.618385][   T29] gspca_spca500: reg write: error -32
[  162.624068][   T30] audit: type=1800 audit(1785866035.254:123): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.196" name="addr_trtype" dev="configfs" ino=12053 res=0 errno=0
[  162.645172][   T29] gspca_spca500: reg write: error -32
[  162.651214][   T29] gspca_spca500: reg write: error -32
[  162.660743][   T29] gspca_spca500: reg write: error -32
[  162.670180][   T30] audit: type=1800 audit(1785866035.274:124): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.196" name="addr_traddr" dev="configfs" ino=12054 res=0 errno=0
[  162.691236][   T29] gspca_spca500: reg write: error -32
[  162.698789][   T29] gspca_spca500: reg write: error -32
[  162.708550][   T29] gspca_spca500: reg write: error -32
[  162.716319][   T29] gspca_spca500: reg write: error -32
[  162.722529][   T29] gspca_spca500: reg write: error -32
[  162.728348][   T29] gspca_spca500: reg write: error -32
[  162.745211][   T29] gspca_spca500: reg write: error -32
[  162.757018][   T29] videodev: could not get a free minor
[  162.764361][   T29] gspca_main: video_register_device err -23
[  162.781046][   T29] spca500 6-1:1.0: probe with driver spca500 failed with error -23
[  162.813045][ T6441] nvme nvme7: rdma_resolve_route failed (-110).
[  162.846351][ T6604] nvme nvme7: rdma connection establishment failed (-19)
[  163.201278][   T30] audit: type=1800 audit(1785866035.924:125): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.198" name="local" dev="configfs" ino=12795 res=0 errno=0
[  163.239663][   T29] usb 6-1: USB disconnect, device number 3
[  163.261003][ T6618] device-mapper: table: 248:0: too large device
[  163.270582][ T6618] device-mapper: ioctl: error adding target to table
[  163.401593][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4
[  163.632386][ T5757] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  165.560181][ T5750] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  165.589729][ T5757] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  165.748701][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.798427][ T5757] usb 1-1: Product: syz
[  165.816224][ T5750] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 0.00
[  165.833159][ T5757] usb 1-1: Manufacturer: syz
[  165.853189][ T5757] usb 1-1: SerialNumber: syz
[  165.864544][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.918318][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.094463][ T5750] ushc 5-1:1.0: probe with driver ushc failed with error -110
[  166.528458][   T30] audit: type=1800 audit(1785866039.254:126): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.209" name="attr_allow_any_host" dev="configfs" ino=12849 res=0 errno=0
[  166.581453][ T6661] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  166.581817][   T30] audit: type=1800 audit(1785866039.294:127): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.209" name="device_path" dev="configfs" ino=12851 res=0 errno=0
[  166.609854][ T6661] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  166.620293][ T5750] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  166.644452][   T30] audit: type=1800 audit(1785866039.294:128): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.209" name="enable" dev="configfs" ino=12852 res=0 errno=0
[  166.701993][   T30] audit: type=1800 audit(1785866039.304:129): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.209" name="addr_trtype" dev="configfs" ino=12853 res=0 errno=0
[  166.826408][ T6441] nvme nvme7: rdma_resolve_route failed (-110).
[  166.850016][ T5750] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  166.855192][ T6661] nvme nvme7: rdma connection establishment failed (-19)
[  166.862307][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.892070][ T5750] usb 3-1: Product: syz
[  166.899821][ T5750] usb 3-1: Manufacturer: syz
[  166.908876][ T6283] veth0_vlan: entered promiscuous mode
[  166.915666][ T5750] usb 3-1: SerialNumber: syz
[  166.947094][ T6283] veth1_vlan: entered promiscuous mode
[  166.953854][ T5750] usb 3-1: 1:1 : unsupported format bits 0x20000
[  167.019019][ T6283] veth0_macvtap: entered promiscuous mode
[  167.066212][ T6283] veth1_macvtap: entered promiscuous mode
[  167.158968][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.167548][ T5750] usb 3-1: 2:1 : unsupported format bits 0x20000
[  167.201848][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.323315][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.350610][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.422082][ T6441] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.459698][ T6441] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.495408][ T5857] usb 5-1: USB disconnect, device number 5
[  167.501109][ T6674] siw: device registration error -23
[  167.567414][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  167.567436][   T30] audit: type=1800 audit(1785866040.294:132): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.204" name="attr_allow_any_host" dev="configfs" ino=12129 res=0 errno=0
[  167.615399][   T30] audit: type=1800 audit(1785866040.334:133): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.204" name="device_path" dev="configfs" ino=13035 res=0 errno=0
[  167.639703][   T30] audit: type=1800 audit(1785866040.344:134): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.204" name="enable" dev="configfs" ino=13036 res=0 errno=0
[  167.661935][ T6674] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  167.675359][ T6674] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  167.685963][   T30] audit: type=1800 audit(1785866040.344:135): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.204" name="addr_trtype" dev="configfs" ino=13037 res=0 errno=0
[  167.718979][ T6674] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  167.733433][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.768883][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.780019][ T6676] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  167.816605][   T30] audit: type=1800 audit(1785866040.404:136): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.204" name="addr_adrfam" dev="configfs" ino=12130 res=0 errno=0
[  167.857514][ T6680] device-mapper: table: 248:0: too large device
[  167.891520][ T6680] device-mapper: ioctl: error adding target to table
[  167.900339][   T30] audit: type=1800 audit(1785866040.424:137): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.204" name="addr_traddr" dev="configfs" ino=12131 res=0 errno=0
[  167.910923][ T6683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.937378][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.959042][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.995917][   T30] audit: type=1800 audit(1785866040.514:138): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.204" name="addr_trsvcid" dev="configfs" ino=12134 res=0 errno=0
[  168.068958][   T36] nvme nvme7: rdma_resolve_route failed (-110).
[  168.101199][ T6674] nvme nvme7: rdma connection establishment failed (-19)
[  170.268450][ T6695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.463994][ T5750] usb 3-1: USB disconnect, device number 4
[  170.513649][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.589018][ T5757] usb 1-1: USB disconnect, device number 5
[  170.702922][ T5651] udevd[5651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.781579][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  171.050645][   T30] audit: type=1800 audit(1785866043.774:139): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.221" name="attr_allow_any_host" dev="configfs" ino=13225 res=0 errno=0
[  171.058813][ T6710] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  171.108944][ T6710] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  171.150686][   T30] audit: type=1800 audit(1785866043.774:140): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.221" name="device_path" dev="configfs" ino=13226 res=0 errno=0
[  171.166239][ T6713] loop4: detected capacity change from 0 to 1024
[  171.262390][   T30] audit: type=1800 audit(1785866043.774:141): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.221" name="enable" dev="configfs" ino=13228 res=0 errno=0
[  171.312028][ T5757] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  171.331135][ T1166] nvme nvme7: rdma_resolve_route failed (-110).
[  171.368178][ T6710] nvme nvme7: rdma connection establishment failed (-19)
[  171.448069][ T6713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.495962][ T5757] usb 1-1: New USB device found, idVendor=2040, idProduct=2900, bcdDevice= 1.01
[  171.524643][ T5757] usb 1-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1
[  171.559245][ T5757] usb 1-1: Product: syz
[  171.571562][ T5757] usb 1-1: Manufacturer: syz
[  171.581581][ T5757] usb 1-1: SerialNumber: syz
[  171.643000][ T5757] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  171.813273][ T6724] device-mapper: table: 248:0: too large device
[  171.817780][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.830027][ T6724] device-mapper: ioctl: error adding target to table
[  171.962796][ T5634] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  172.076641][ T6728] siw: device registration error -23
[  172.122361][ T6728] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  172.144335][ T5634] usb 7-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[  172.161879][ T6728] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  172.172420][ T5634] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.040676][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  174.040701][   T30] audit: type=1800 audit(1785866046.724:150): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.228" name="addr_traddr" dev="configfs" ino=12247 res=0 errno=0
[  174.041409][ T6728] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  174.048945][ T5634] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[  174.296842][   T30] audit: type=1800 audit(1785866047.014:151): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.228" name="addr_trsvcid" dev="configfs" ino=13266 res=0 errno=0
[  174.319029][ T6728] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  174.575009][ T2363] pvrusb2: Failed to submit write-control URB status=-2
[  174.600771][ T5757] usb 1-1: USB disconnect, device number 6
[  174.641301][ T2363] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  174.676085][ T2363] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  174.679436][ T6728] nvme nvme7: rdma connection establishment failed (-512)
[  174.699944][   T36] nvme nvme7: rdma_resolve_route failed (-110).
[  174.852302][ T5750] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS
[  174.892168][ T5750] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS
[  175.030770][ T5750] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[  175.102189][ T5750] i801_smbus 0000:00:01.3: PCI INT A: no GSI
[  175.114681][ T5750] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS
[  175.171183][ T5783] ACPI: \_SB_.LNKA: Enabled at IRQ 11
[  175.200151][ T5783] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS
[  175.525029][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.622421][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.717556][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.763836][   T30] audit: type=1800 audit(1785866048.494:152): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.238" name="local" dev="configfs" ino=13358 res=0 errno=0
[  175.814548][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.854476][ T5750] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  175.928664][   T30] audit: type=1800 audit(1785866048.654:153): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.239" name="attr_allow_any_host" dev="configfs" ino=13300 res=0 errno=0
[  175.941364][ T6763] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  175.986784][   T30] audit: type=1800 audit(1785866048.654:154): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.239" name="device_path" dev="configfs" ino=13301 res=0 errno=0
[  175.993955][ T6763] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  176.018389][ T5854] logitech-hidpp-device 0005:046D:B012.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  176.044116][   T30] audit: type=1800 audit(1785866048.654:155): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.239" name="enable" dev="configfs" ino=13302 res=0 errno=0
[  176.079194][ T5750] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  176.097845][ T5750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.101525][   T30] audit: type=1800 audit(1785866048.654:156): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.239" name="addr_trtype" dev="configfs" ino=13303 res=0 errno=0
[  176.124638][ T5750] usb 6-1: Product: syz
[  176.147625][ T5750] usb 6-1: Manufacturer: syz
[  176.165328][ T5750] usb 6-1: SerialNumber: syz
[  176.213034][   T30] audit: type=1800 audit(1785866048.714:157): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.239" name="addr_traddr" dev="configfs" ino=13304 res=0 errno=0
[  176.237150][ T5750] usb 6-1: 1:1 : unsupported format bits 0x20000
[  176.320434][   T13] nvme nvme7: rdma_resolve_route failed (-110).
[  176.372600][ T5634] usb 7-1: USB disconnect, device number 2
[  176.394514][ T6762] nvme nvme7: rdma connection establishment failed (-19)
[  176.420577][ T5634] pvrusb2: Device being rendered inoperable
[  176.430134][ T5750] usb 6-1: 2:1 : unsupported format bits 0x20000
[  176.616902][ T6777] device-mapper: table: 248:0: too large device
[  176.647775][ T6777] device-mapper: ioctl: error adding target to table
[  178.719615][ T5750] usb 6-1: USB disconnect, device number 4
[  179.020179][ T5651] udevd[5651]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.267554][ T6798] loop0: detected capacity change from 0 to 128
[  179.361547][ T6798] ufs: ufs_fill_super(): bad magic number
[  180.360925][ T6787] loop4: detected capacity change from 0 to 32768
[  180.394999][   T30] audit: type=1800 audit(1785866053.124:158): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.252" name="local" dev="configfs" ino=14384 res=0 errno=0
[  180.466008][ T6787] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  180.586566][ T6787] XFS (loop4): Ending clean mount
[  180.681789][ T5857] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  180.791250][ T5627] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  180.864634][ T5857] usb 6-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00
[  180.911066][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.952566][ T5857] usb 6-1: Product: syz
[  180.969958][ T5857] usb 6-1: Manufacturer: syz
[  180.988288][ T5857] usb 6-1: SerialNumber: syz
[  183.271306][ T6846] batman_adv: batadv0: Adding interface: veth0
[  183.294041][ T6846] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.343011][ T6846] batman_adv: batadv0: Interface activated: veth0
[  183.463400][ T6850] siw: device registration error -23
[  183.507953][   T30] audit: type=1800 audit(1785866056.234:159): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="attr_allow_any_host" dev="configfs" ino=14410 res=0 errno=0
[  183.548638][ T6850] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  183.576347][ T6852] loop6: detected capacity change from 0 to 1024
[  183.585920][ T6850] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  183.605667][   T30] audit: type=1800 audit(1785866056.254:160): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="device_path" dev="configfs" ino=14411 res=0 errno=0
[  183.633803][ T6850] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  183.687996][ T6850] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  183.710427][   T30] audit: type=1800 audit(1785866056.264:161): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="enable" dev="configfs" ino=14412 res=0 errno=0
[  183.739665][ T6858] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  183.753752][   T30] audit: type=1800 audit(1785866056.264:162): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="addr_trtype" dev="configfs" ino=14413 res=0 errno=0
[  183.756477][ T6858] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  183.775964][   T30] audit: type=1800 audit(1785866056.324:163): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="addr_adrfam" dev="configfs" ino=14414 res=0 errno=0
[  183.814722][ T6852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.879193][   T30] audit: type=1800 audit(1785866056.364:164): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="addr_traddr" dev="configfs" ino=14415 res=0 errno=0
[  183.941805][   T30] audit: type=1800 audit(1785866056.414:165): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="addr_trsvcid" dev="configfs" ino=14416 res=0 errno=0
[  184.079750][ T6866] loop0: detected capacity change from 0 to 65536
[  184.118120][ T1112] nvme nvme7: rdma_resolve_route failed (-110).
[  184.162737][ T6850] nvme nvme7: rdma connection establishment failed (-19)
[  184.496005][ T6858] nvme nvme7: rdma connection establishment failed (-512)
[  184.517432][ T5857] usb 6-1: USB disconnect, device number 5
[  184.527797][ T6441] nvme nvme7: rdma_resolve_route failed (-110).
[  184.898354][ T6158] udevd[6158]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  185.096389][   T30] audit: type=1800 audit(1785866057.824:166): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.266" name="local" dev="configfs" ino=14462 res=0 errno=0
[  185.264635][ T6894] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  185.464165][ T6897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  185.558828][   T30] audit: type=1800 audit(1785866058.284:167): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.269" name="UDC" dev="configfs" ino=13512 res=0 errno=0
[  185.668809][   T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.769627][ T6908] rdma_rxe: rxe_newlink: failed to add veth0
[  185.918611][   T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.066302][   T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.168831][ T5625] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.303953][   T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.440083][ T6920] device-mapper: table: 248:0: too large device
[  186.474632][ T6920] device-mapper: ioctl: error adding target to table
[  186.532558][   T30] audit: type=1800 audit(1785866059.254:168): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="attr_allow_any_host" dev="configfs" ino=14483 res=0 errno=0
[  186.548577][ T6927] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  186.603392][ T6927] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  186.645026][   T30] audit: type=1800 audit(1785866059.264:169): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="device_path" dev="configfs" ino=14484 res=0 errno=0
[  186.650897][ T6927] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  186.742483][ T5750] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  186.750529][   T30] audit: type=1800 audit(1785866059.264:170): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="enable" dev="configfs" ino=14485 res=0 errno=0
[  186.798085][ T6925] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  186.860745][   T30] audit: type=1800 audit(1785866059.264:171): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="addr_trtype" dev="configfs" ino=14486 res=0 errno=0
[  186.917305][ T5750] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01
[  186.927310][   T57] bridge_slave_1: left allmulticast mode
[  186.941415][ T6903] loop5: detected capacity change from 0 to 32768
[  186.945708][   T57] bridge_slave_1: left promiscuous mode
[  186.969456][ T5750] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1
[  186.978324][ T6936] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  186.983872][   T30] audit: type=1800 audit(1785866059.324:172): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="addr_adrfam" dev="configfs" ino=14488 res=0 errno=0
[  187.004830][ T6903] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.271 (6903)
[  187.009708][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  187.036681][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  187.046303][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.047758][ T5750] usb 3-1: Product: syz
[  187.054492][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  187.066071][   T30] audit: type=1800 audit(1785866059.374:173): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="addr_traddr" dev="configfs" ino=14489 res=0 errno=0
[  187.087663][   T30] audit: type=1800 audit(1785866059.524:174): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="addr_trsvcid" dev="configfs" ino=14499 res=0 errno=0
[  187.110314][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  187.110439][ T6936] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  187.130090][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  187.150918][   T57] bridge_slave_0: left allmulticast mode
[  187.173790][ T5750] usb 3-1: Manufacturer: syz
[  187.178441][   T57] bridge_slave_0: left promiscuous mode
[  187.189509][ T5750] usb 3-1: SerialNumber: syz
[  187.198493][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.221368][ T5750] pvrusb2: Hardware description: Terratec Grabster AV400
[  187.228948][ T5750] pvrusb2: **********
[  187.233906][ T5750] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  187.245598][ T5750] pvrusb2: Important functionality might not be entirely working.
[  187.263102][ T5750] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  187.276362][ T5750] pvrusb2: **********
[  187.295757][ T6903] BTRFS info (device loop5): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  187.324694][ T6925] nvme nvme7: rdma connection establishment failed (-512)
[  187.349208][   T12] nvme nvme7: rdma_resolve_route failed (-110).
[  187.356120][ T6903] BTRFS info (device loop5): using xxhash64 checksum algorithm
[  187.551639][ T6903] BTRFS info (device loop5): enabling ssd optimizations
[  187.562719][ T6903] BTRFS info (device loop5): turning on async discard
[  187.582292][ T6903] BTRFS info (device loop5): enabling free space tree
[  187.721245][ T1112] nvme nvme7: rdma_resolve_route failed (-110).
[  187.721367][ T6933] nvme nvme7: rdma connection establishment failed (-512)
[  188.085296][ T5623] BTRFS info (device loop5): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  188.350942][ T5353] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  188.459530][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.467417][ T6978] nvme_fabrics: missing parameter 'transport=%s'
[  188.485168][ T6978] nvme_fabrics: missing parameter 'nqn=%s'
[  188.510209][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.536535][   T30] audit: type=1800 audit(1785866061.264:175): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.281" name="local" dev="configfs" ino=14548 res=0 errno=0
[  188.583640][   T57] bond0 (unregistering): Released all slaves
[  188.584691][ T5353] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00
[  188.650963][ T5353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.213500][ T5637] Bluetooth: hci0: command tx timeout
[  189.394700][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  189.559956][ T6982] loop0: detected capacity change from 0 to 32768
[  189.598867][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  189.627027][ T6982] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.283 (6982)
[  189.653343][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.661398][    T9] usb 6-1: Product: syz
[  189.689617][    T9] usb 6-1: Manufacturer: syz
[  189.703799][    T9] usb 6-1: SerialNumber: syz
[  189.712212][ T5750] usb 3-1: USB disconnect, device number 5
[  189.718471][ T6982] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  189.749056][ T6982] BTRFS info (device loop0): using blake2b checksum algorithm
[  189.800375][ T5750] pvrusb2: Device being rendered inoperable
[  189.862875][    T9] usb 6-1: 1:1 : unsupported format bits 0x20000
[  189.938771][ T7012] device-mapper: table: 248:0: too large device
[  189.988217][ T7012] device-mapper: ioctl: error adding target to table
[  190.016995][    T9] usb 6-1: 2:1 : unsupported format bits 0x20000
[  190.122288][ T6982] BTRFS info (device loop0): enabling ssd optimizations
[  190.177126][ T6982] BTRFS info (device loop0): turning on async discard
[  190.177142][ T6934] lo speed is unknown, defaulting to 1000
[  190.203257][ T6982] BTRFS info (device loop0): enabling free space tree
[  190.223197][ T6982] BTRFS info (device loop0): use zstd compression, level 3
[  190.441581][ T7032] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  190.482280][ T5625] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  190.671022][ T7032] md: invalid raid superblock magic on ram0
[  190.711634][ T7032] md: ram0 does not have a valid v0.90 superblock, not importing!
[  190.832250][   T57] hsr_slave_0: left promiscuous mode
[  190.872322][   T57] hsr_slave_1: left promiscuous mode
[  190.899158][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.925391][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.943699][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.967073][   T30] audit: type=1800 audit(1785866063.694:176): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.289" name="attr_allow_any_host" dev="configfs" ino=14629 res=0 errno=0
[  190.971672][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.998953][ T7042] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  191.056917][   T30] audit: type=1800 audit(1785866063.694:177): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.289" name="device_path" dev="configfs" ino=14630 res=0 errno=0
[  191.077668][ T7042] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  191.105282][ T7041] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  191.134597][ T7041] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  191.154716][   T57] veth1_macvtap: left promiscuous mode
[  191.161022][   T30] audit: type=1800 audit(1785866063.694:178): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.289" name="enable" dev="configfs" ino=14631 res=0 errno=0
[  191.177762][   T57] veth0_macvtap: left promiscuous mode
[  191.216318][   T57] veth1_vlan: left promiscuous mode
[  191.255651][   T57] veth0_vlan: left promiscuous mode
[  191.269380][   T30] audit: type=1800 audit(1785866063.724:179): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.289" name="addr_trtype" dev="configfs" ino=14632 res=0 errno=0
[  191.292356][ T5637] Bluetooth: hci0: command tx timeout
[  191.391765][   T30] audit: type=1800 audit(1785866063.774:180): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.289" name="addr_adrfam" dev="configfs" ino=13779 res=0 errno=0
[  191.496860][   T13] nvme nvme7: rdma_resolve_route failed (-110).
[  191.513152][    T9] usb 6-1: USB disconnect, device number 6
[  191.523352][   T30] audit: type=1800 audit(1785866063.834:181): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.289" name="addr_traddr" dev="configfs" ino=14637 res=0 errno=0
[  191.564446][ T7041] nvme nvme7: rdma connection establishment failed (-19)
[  191.616780][   T30] audit: type=1800 audit(1785866063.864:182): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.289" name="addr_trsvcid" dev="configfs" ino=13780 res=0 errno=0
[  191.701786][ T5651] udevd[5651]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.122097][ T7059] Zero length message leads to an empty skb
[  192.185162][ T6997] loop3: detected capacity change from 0 to 65536
[  192.217969][   T30] audit: type=1800 audit(1785866064.944:183): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.293" name="attr_allow_any_host" dev="configfs" ino=13797 res=0 errno=0
[  192.243725][ T6997] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop3": -EINTR
[  192.281628][ T7061] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  192.335662][ T7065] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  192.345434][   T30] audit: type=1800 audit(1785866064.974:184): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.293" name="device_path" dev="configfs" ino=13798 res=0 errno=0
[  192.345505][   T30] audit: type=1800 audit(1785866064.974:185): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.293" name="enable" dev="configfs" ino=13799 res=0 errno=0
[  192.651075][   T48] nvme nvme7: rdma_resolve_route failed (-110).
[  192.684070][ T7059] nvme nvme7: rdma connection establishment failed (-19)
[  192.817439][ T7070] nvme_fabrics: missing parameter 'transport=%s'
[  192.830228][ T7070] nvme_fabrics: missing parameter 'nqn=%s'
[  193.083578][   T57] team0 (unregistering): Port device team_slave_1 removed
[  193.203950][   T57] team0 (unregistering): Port device team_slave_0 removed
[  193.225195][ T7078] kAFS: unable to lookup cell '127.0.0.1'
[  193.372780][ T5637] Bluetooth: hci0: command tx timeout
[  193.410047][ T7083] device-mapper: table: 248:0: too large device
[  193.434070][ T7083] device-mapper: ioctl: error adding target to table
[  193.497365][ T7086] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  193.617361][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  193.624031][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  193.642671][ T7086] md: invalid raid superblock magic on ram0
[  193.678148][ T7086] md: ram0 does not have a valid v0.90 superblock, not importing!
[  193.828424][ T7079] loop3: detected capacity change from 0 to 32768
[  193.885779][ T7079] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  193.953092][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5
[  194.132904][ T7110] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  194.157862][ T7079] XFS (loop3): Ending clean mount
[  194.170483][ T7110] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  194.193953][ T7110] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  194.263573][ T7101] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  194.333471][ T5353] hid-rmi 0003:1532:011D.0006: unable to set rmi mode to 1 (-110)
[  194.365616][ T5353] hid-rmi 0003:1532:011D.0006: failed to set rmi mode
[  194.429130][ T5353] hid-rmi 0003:1532:011D.0006: hiddev0,hidraw0: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.4-1/input0
[  194.499859][ T5626] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  194.576079][   T48] nvme nvme7: rdma_resolve_route failed (-110).
[  194.626786][ T7110] nvme nvme7: rdma connection establishment failed (-19)
[  194.851915][ T7117] svc: failed to register nfsdv3 RPC service (errno 111).
[  194.875868][ T7117] svc: failed to register nfsaclv3 RPC service (errno 111).
[  195.164176][ T7132] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  195.188637][ T7132] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  195.390874][ T6441] nvme nvme7: rdma_resolve_route failed (-110).
[  195.447256][ T7132] nvme nvme7: rdma connection establishment failed (-19)
[  195.461775][ T5637] Bluetooth: hci0: command tx timeout
[  195.674069][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.712091][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.726193][ T7146] nvme_fabrics: missing parameter 'transport=%s'
[  195.735759][ T6934] bridge_slave_0: entered allmulticast mode
[  195.751848][ T7146] nvme_fabrics: missing parameter 'nqn=%s'
[  195.757431][ T6934] bridge_slave_0: entered promiscuous mode
[  195.788353][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.801953][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.819442][ T6934] bridge_slave_1: entered allmulticast mode
[  195.839032][ T6934] bridge_slave_1: entered promiscuous mode
[  195.957210][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.988342][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.011887][ T5857] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  196.020396][ T7157] device-mapper: table: 248:0: too large device
[  196.041973][ T7157] device-mapper: ioctl: error adding target to table
[  196.099252][ T6934] team0: Port device team_slave_0 added
[  196.134072][ T6934] team0: Port device team_slave_1 added
[  196.194584][ T5857] usb 6-1: not running at top speed; connect to a high speed hub
[  196.214363][ T5857] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  196.242209][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.245553][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6
[  196.266775][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.275640][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.322154][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.360045][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.391781][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.449867][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.591466][ T6934] hsr_slave_0: entered promiscuous mode
[  196.609555][ T6934] hsr_slave_1: entered promiscuous mode
[  196.621121][ T6934] debugfs: 'hsr0' already exists in 'hsr'
[  196.650460][ T6934] Cannot create hsr debugfs directory
[  196.681128][ T5857] cxacru_cm: 19 callbacks suppressed
[  196.681157][ T5857] cxacru 6-1:1.0: invalid response length to cm 0x90: 2
[  196.720757][ T7168] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  196.754593][ T7168] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  196.923329][ T7138] loop0: detected capacity change from 0 to 65536
[  196.979809][ T7138] XFS (loop0): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  197.216727][ T7138] XFS (loop0): Ending clean mount
[  197.444464][ T6934] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  197.477648][ T5625] XFS (loop0): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  197.494569][ T6934] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  197.529021][ T6934] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  197.559723][ T6934] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  197.578627][ T6934] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  197.616672][ T6934] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  197.634316][ T6934] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  197.660471][ T6934] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  197.737039][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7
[  197.875034][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.928128][ T6934] 8021q: adding VLAN 0 to HW filter on device team0
[  197.954149][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.961371][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.982289][ T7171] NFSD: Unable to initialize client recovery tracking! (-110)
[  197.991971][ T7171] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  198.005669][ T7171] NFSD: starting 90-second grace period (net f000053e)
[  198.037628][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.044822][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.148742][   T30] audit: type=1800 audit(1785866070.874:205): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.318" name="idVendor" dev="configfs" ino=14039 res=0 errno=0
[  198.211325][   T30] audit: type=1800 audit(1785866070.904:206): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.318" name="idProduct" dev="configfs" ino=14040 res=0 errno=0
[  198.232286][   T30] audit: type=1800 audit(1785866070.914:207): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.318" name="UDC" dev="configfs" ino=14041 res=0 errno=0
[  198.320614][   T30] audit: type=1800 audit(1785866071.044:208): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.319" name="attr_allow_any_host" dev="configfs" ino=14043 res=0 errno=0
[  198.348989][ T7215] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  198.368589][ T7215] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  198.396003][   T30] audit: type=1800 audit(1785866071.074:209): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.319" name="device_path" dev="configfs" ino=14044 res=0 errno=0
[  198.428158][ T7215] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  198.443712][   T30] audit: type=1800 audit(1785866071.074:210): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.319" name="enable" dev="configfs" ino=14045 res=0 errno=0
[  198.467487][ T7215] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  198.472837][   T30] audit: type=1800 audit(1785866071.074:211): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.319" name="addr_trtype" dev="configfs" ino=14046 res=0 errno=0
[  198.547671][   T30] audit: type=1800 audit(1785866071.094:212): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.319" name="addr_adrfam" dev="configfs" ino=14047 res=0 errno=0
[  198.634537][   T30] audit: type=1800 audit(1785866071.154:213): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.319" name="addr_traddr" dev="configfs" ino=14048 res=0 errno=0
[  198.718130][ T1166] nvme nvme7: rdma_resolve_route failed (-110).
[  198.768392][ T7208] nvme nvme7: rdma connection establishment failed (-19)
[  198.864864][ T5353] usb 6-1: USB disconnect, device number 7
[  199.035302][ T7228] svc: failed to register nfsdv3 RPC service (errno 111).
[  199.087286][ T7228] svc: failed to register nfsaclv3 RPC service (errno 111).
[  199.118469][ T7236] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  199.205162][ T7239] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  199.258277][ T7239] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  199.415704][ T7242] nvme_fabrics: missing parameter 'transport=%s'
[  199.435435][ T7242] nvme_fabrics: missing parameter 'nqn=%s'
[  199.648387][ T7255] device-mapper: table: 248:0: too large device
[  199.675323][ T7255] device-mapper: ioctl: error adding target to table
[  199.704520][ T1112] nvme nvme7: rdma_resolve_route failed (-110).
[  199.744278][ T7239] nvme nvme7: rdma connection establishment failed (-19)
[  199.996989][ T6934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.124665][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8
[  200.293842][ T5857] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  200.503719][ T5857] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  200.533550][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.576615][ T5857] usb 3-1: Product: syz
[  200.593466][ T5857] usb 3-1: Manufacturer: syz
[  200.610541][ T5857] usb 3-1: SerialNumber: syz
[  200.669270][ T5857] usb 3-1: 1:1 : unsupported format bits 0x20000
[  200.855668][ T5857] usb 3-1: 2:1 : unsupported format bits 0x20000
[  200.877383][ T7287] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  200.896040][ T7282] loop0: detected capacity change from 0 to 8192
[  200.904412][ T7287] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  200.931236][ T7287] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  200.942338][ T7282] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  200.962662][ T7287] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  201.036300][ T6934] veth0_vlan: entered promiscuous mode
[  201.078834][ T6934] veth1_vlan: entered promiscuous mode
[  201.184112][   T12] nvme nvme7: rdma_resolve_route failed (-110).
[  201.207189][ T6934] veth0_macvtap: entered promiscuous mode
[  201.224986][ T7287] nvme nvme7: rdma connection establishment failed (-19)
[  201.255501][ T6934] veth1_macvtap: entered promiscuous mode
[  201.267048][ T5857] usb 3-1: USB disconnect, device number 6
[  201.374633][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.399222][ T5651] udevd[5651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.414419][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.542974][ T1166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.612480][ T6441] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.617365][ T7293] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  201.641580][ T6441] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.659743][ T6441] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.851447][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.881224][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.987029][ T7260] loop5: detected capacity change from 0 to 65536
[  202.028009][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.046779][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.076836][ T7260] XFS (loop5): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  202.120307][ T7296] nvme_fabrics: missing parameter 'transport=%s'
[  202.153855][ T7296] nvme_fabrics: missing parameter 'nqn=%s'
[  202.364474][ T7260] XFS (loop5): Ending clean mount
[  202.394113][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  202.394138][   T30] audit: type=1800 audit(1785866075.124:232): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.343" name="attr_allow_any_host" dev="configfs" ino=14232 res=0 errno=0
[  202.431169][ T7317] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  202.451958][ T7317] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  202.463736][   T30] audit: type=1800 audit(1785866075.154:233): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.343" name="device_path" dev="configfs" ino=14233 res=0 errno=0
[  202.491602][ T7319] device-mapper: table: 248:0: too large device
[  202.499984][   T30] audit: type=1800 audit(1785866075.154:234): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.343" name="enable" dev="configfs" ino=14234 res=0 errno=0
[  202.517839][ T7319] device-mapper: ioctl: error adding target to table
[  202.528581][   T30] audit: type=1800 audit(1785866075.154:235): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.343" name="addr_trtype" dev="configfs" ino=14235 res=0 errno=0
[  202.554569][   T30] audit: type=1800 audit(1785866075.174:236): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.343" name="addr_traddr" dev="configfs" ino=14240 res=0 errno=0
[  202.769779][   T57] nvme nvme7: rdma_resolve_route failed (-110).
[  202.790795][ T5623] XFS (loop5): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  202.809086][ T7317] nvme nvme7: rdma connection establishment failed (-19)
[  203.037361][   T30] audit: type=1800 audit(1785866075.764:237): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.346" name="idProduct" dev="configfs" ino=14267 res=0 errno=0
[  203.128465][   T30] audit: type=1800 audit(1785866075.764:238): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.346" name="UDC" dev="configfs" ino=14268 res=0 errno=0
[  203.257557][   T30] audit: type=1800 audit(1785866075.984:239): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.348" name="attr_allow_any_host" dev="configfs" ino=14275 res=0 errno=0
[  203.290559][ T7334] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  203.314939][ T7334] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  203.333005][   T30] audit: type=1800 audit(1785866076.014:240): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.348" name="device_path" dev="configfs" ino=14276 res=0 errno=0
[  203.356487][ T7334] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  203.377917][ T7334] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  203.394856][   T30] audit: type=1800 audit(1785866076.014:241): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.348" name="enable" dev="configfs" ino=14277 res=0 errno=0
[  203.639929][ T7339] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  203.665861][ T1166] nvme nvme7: rdma_resolve_route failed (-110).
[  203.709896][ T7332] nvme nvme7: rdma connection establishment failed (-19)
[  203.741396][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  203.744663][ T7323] loop7: detected capacity change from 0 to 32768
[  203.758616][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  203.766900][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  203.780232][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  203.790991][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  203.864821][ T7323] (syz.7.273,7323,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[  203.898460][ T7323] (syz.7.273,7323,0):ocfs2_fill_super:1177 ERROR: status = -22
[  204.240429][ T7355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  204.251972][ T5770] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  204.377759][ T7355] md: invalid raid superblock magic on ram0
[  204.383739][ T7355] md: ram0 does not have a valid v0.90 superblock, not importing!
[  204.442446][ T5770] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  204.481081][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.497479][ T7361] device-mapper: table: 248:0: too large device
[  204.512986][ T5770] usb 3-1: Product: syz
[  204.521064][ T5770] usb 3-1: Manufacturer: syz
[  204.530244][ T7361] device-mapper: ioctl: error adding target to table
[  204.532783][ T7358] nvme_fabrics: missing parameter 'transport=%s'
[  204.547674][ T5770] usb 3-1: SerialNumber: syz
[  204.567854][ T7358] nvme_fabrics: missing parameter 'nqn=%s'
[  204.643178][ T5770] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  204.958477][ T7377] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  204.989628][ T7377] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  205.006339][ T7342] lo speed is unknown, defaulting to 1000
[  205.174545][ T1166] nvme nvme7: rdma_resolve_route failed (-110).
[  205.204028][ T7377] nvme nvme7: rdma connection establishment failed (-19)
[  205.596788][ T7389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  205.857808][ T5637] Bluetooth: hci6: command tx timeout
[  205.951253][ T7395] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  206.019384][ T7395] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  206.068060][ T7393] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  206.092587][ T7393] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  206.209905][   T48] nvme nvme7: rdma_resolve_route failed (-110).
[  206.246942][ T7393] nvme nvme7: rdma connection establishment failed (-19)
[  206.254363][ T7370] loop3: detected capacity change from 0 to 65536
[  206.306528][ T7370] XFS (loop3): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  206.352794][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.360156][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.367414][ T7342] bridge_slave_0: entered allmulticast mode
[  206.376083][ T7342] bridge_slave_0: entered promiscuous mode
[  206.385618][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.393166][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.400783][ T7342] bridge_slave_1: entered allmulticast mode
[  206.409570][ T7342] bridge_slave_1: entered promiscuous mode
[  206.453948][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.468299][ T7370] XFS (loop3): Ending clean mount
[  206.468637][ T7342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.556718][ T7342] team0: Port device team_slave_0 added
[  206.568596][ T7342] team0: Port device team_slave_1 added
[  206.694394][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.718878][ T5626] XFS (loop3): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  206.719065][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.866316][ T7416] device-mapper: table: 248:0: too large device
[  206.872792][ T7416] device-mapper: ioctl: error adding target to table
[  206.882476][ T7342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.918210][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.934326][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.027179][ T7420] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  207.042792][ T7342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.201948][ T7420] md: invalid raid superblock magic on ram0
[  207.210123][ T7342] hsr_slave_0: entered promiscuous mode
[  207.219278][ T7420] md: ram0 does not have a valid v0.90 superblock, not importing!
[  207.230697][ T7342] hsr_slave_1: entered promiscuous mode
[  207.242398][ T7342] debugfs: 'hsr0' already exists in 'hsr'
[  207.250619][ T7342] Cannot create hsr debugfs directory
[  207.270967][ T7422] nvme_fabrics: missing parameter 'nqn=%s'
[  207.775519][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  207.775545][   T30] audit: type=1800 audit(1785866080.504:260): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.374" name="attr_allow_any_host" dev="configfs" ino=15717 res=0 errno=0
[  207.819780][ T7434] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  207.828536][ T7436] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  207.838557][ T7434] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  207.853080][   T30] audit: type=1800 audit(1785866080.534:261): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.374" name="device_path" dev="configfs" ino=15718 res=0 errno=0
[  207.909100][   T30] audit: type=1800 audit(1785866080.544:262): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.374" name="enable" dev="configfs" ino=15719 res=0 errno=0
[  207.930522][   T30] audit: type=1800 audit(1785866080.544:263): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.374" name="addr_trtype" dev="configfs" ino=15720 res=0 errno=0
[  207.942392][ T5637] Bluetooth: hci6: command tx timeout
[  207.959698][ T1166] nvme nvme0: Removing ctrl: NQN "testnqn"
[  207.966367][ T6441] nvme nvme1: Removing ctrl: NQN "testnqn"
[  207.972546][ T1112] nvme nvme2: Removing ctrl: NQN "testnqn"
[  207.983470][   T48] nvme nvme3: Removing ctrl: NQN "testnqn"
[  207.997299][   T57] nvme nvme4: Removing ctrl: NQN "testnqn"
[  208.018156][   T30] audit: type=1800 audit(1785866080.574:264): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.374" name="addr_traddr" dev="configfs" ino=15721 res=0 errno=0
[  208.020711][   T13] nvme nvme5: Removing ctrl: NQN "testnqn"
[  208.039202][   T30] audit: type=1800 audit(1785866080.604:265): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.375" name="attr_qid_max" dev="configfs" ino=16588 res=0 errno=0
[  208.059812][   T12] nvme nvme6: Removing ctrl: NQN "testnqn"
[  208.104917][ T7440] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  208.116949][ T1105] nvme nvme7: rdma_resolve_route failed (-110).
[  208.168342][ T7434] nvme nvme7: rdma connection establishment failed (-19)
[  208.232909][ T5770] gspca_mr97310a: reg read [21] error -110
[  208.257348][ T5770] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110
[  208.504916][ T1699] nvme nvme0: long keepalive RTT (4294879666 ms)
[  208.512015][ T1699] nvme nvme0: failed nvme_keep_alive_end_io error=4
[  208.556048][  T139] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:f3f04de6-fea1-40e9-ba81-dd810578b99b.
[  208.557486][   T30] audit: type=1800 audit(1785866081.284:266): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.377" name="idProduct" dev="configfs" ino=15788 res=0 errno=0
[  208.596427][   T30] audit: type=1800 audit(1785866081.324:267): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.377" name="UDC" dev="configfs" ino=15789 res=0 errno=0
[  208.655512][ T7438] nvme nvme7: creating 2 I/O queues.
[  208.674758][   T30] audit: type=1800 audit(1785866081.374:268): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.378" name="attr_allow_any_host" dev="configfs" ino=15790 res=0 errno=0
[  208.676995][ T7447] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  208.705517][ T7342] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  208.724443][   T30] audit: type=1800 audit(1785866081.374:269): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.378" name="device_path" dev="configfs" ino=15791 res=0 errno=0
[  208.743706][ T7447] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  208.769611][ T7438] nvme nvme7: new ctrl: "testnqn"
[  208.787936][ T7446] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  208.809744][ T7446] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  208.830798][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  208.929510][ T7342] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  208.993234][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  209.066210][ T7342] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  209.148754][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  209.181554][ T1011] nvme nvme1: rdma_resolve_route failed (-110).
[  209.197691][ T7342] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  209.231539][ T7446] nvme nvme1: rdma connection establishment failed (-19)
[  209.278540][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  209.281027][ T5770] usb 3-1: USB disconnect, device number 7
[  209.504883][ T7466] ubi0: attaching mtd0
[  209.595610][ T7468] device-mapper: table: 248:0: too large device
[  209.624383][ T7468] device-mapper: ioctl: error adding target to table
[  209.649707][ T7472] UBIFS error (pid: 7472): cannot open "ubi0_0", error -19
[  209.693974][ T7466] ubi0: scanning is finished
[  209.746351][ T7466] ubi0: empty MTD device detected
[  209.785486][ T7474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  209.911960][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.935693][ T7474] md: invalid raid superblock magic on ram0
[  209.962849][ T7474] md: ram0 does not have a valid v0.90 superblock, not importing!
[  209.999894][ T7342] 8021q: adding VLAN 0 to HW filter on device team0
[  210.013296][ T5637] Bluetooth: hci6: command tx timeout
[  210.080286][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.087514][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.095791][ T7466] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  210.113444][ T7466] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  210.140265][ T7466] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  210.173937][ T7466] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  210.203908][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.205435][ T7466] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  210.211127][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.258701][ T7480] nvme_fabrics: missing parameter 'nqn=%s'
[  210.266516][ T7466] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  210.329456][ T7466] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1501355782
[  210.420576][ T7466] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  210.473852][ T7482] ubi0: background thread "ubi_bgt0d" started, PID 7482
[  210.890313][ T7497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  210.954541][ T7497] md: invalid raid superblock magic on ram1
[  211.000622][ T7497] md: ram1 does not have a valid v0.90 superblock, not importing!
[  211.331528][ T7504] siw: device registration error -23
[  211.399940][ T7504] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  211.444151][ T7504] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  211.691090][  T139] nvme nvme1: rdma_resolve_route failed (-110).
[  211.722806][ T7504] nvme nvme1: rdma connection establishment failed (-19)
[  212.060995][ T7456] loop7: detected capacity change from 0 to 65536
[  212.092115][ T5637] Bluetooth: hci6: command tx timeout
[  212.108757][ T7456] XFS (loop7): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  212.158927][ T7534] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  212.173475][ T5857] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  212.219519][ T7534] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  212.242302][ T7456] XFS (loop7): Ending clean mount
[  212.249755][ T7534] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  212.249833][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.283548][ T7534] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  212.329269][ T6934] XFS (loop7): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  212.354755][ T5857] usb 3-1: not running at top speed; connect to a high speed hub
[  212.378909][ T5857] usb 3-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice= 1.00
[  212.398685][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.426097][ T5857] usb 3-1: Product: syz
[  212.441819][ T5857] usb 3-1: Manufacturer: syz
[  212.453721][ T5857] usb 3-1: SerialNumber: syz
[  212.484743][ T1166] nvme nvme1: rdma_resolve_route failed (-110).
[  212.495144][ T5857] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c
[  212.537362][ T7526] nvme nvme1: rdma connection establishment failed (-19)
[  212.723523][ T7543] device-mapper: table: 248:0: too large device
[  212.743899][ T7543] device-mapper: ioctl: error adding target to table
[  212.898276][ T7547] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  213.033074][ T7547] md: invalid raid superblock magic on ram0
[  213.050999][ T7547] md: ram0 does not have a valid v0.90 superblock, not importing!
[  213.093537][ T7342] veth0_vlan: entered promiscuous mode
[  213.114117][ T7342] veth1_vlan: entered promiscuous mode
[  213.196245][ T7342] veth0_macvtap: entered promiscuous mode
[  213.215791][ T7342] veth1_macvtap: entered promiscuous mode
[  213.257969][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.284446][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.307780][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  213.307803][   T30] audit: type=1800 audit(1785866086.034:290): pid=7556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.395" name="local" dev="configfs" ino=15902 res=0 errno=0
[  213.340273][ T7553] nvme_fabrics: missing parameter 'nqn=%s'
[  213.350028][ T7557] dlm: no local IP address has been set
[  213.355971][   T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.367582][ T7557] dlm: cannot start dlm midcomms -107
[  213.427023][   T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.469833][   T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.502136][   T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.548073][  T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.557790][  T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.603408][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.611432][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.821396][   T30] audit: type=1800 audit(1785866086.544:291): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.349" name="local" dev="configfs" ino=16099 res=0 errno=0
[  213.960737][ T7570] loop0: detected capacity change from 0 to 1024
[  214.127526][ T7570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.169381][ T7578] siw: device registration error -23
[  214.208088][   T30] audit: type=1800 audit(1785866086.924:292): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.404" name="attr_allow_any_host" dev="configfs" ino=17156 res=0 errno=0
[  214.266262][ T7578] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  214.296015][ T7578] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  214.317402][ T7570] ./loop1: Can't open blockdev
[  214.321635][ T7580] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.322323][   T30] audit: type=1800 audit(1785866086.974:293): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.404" name="device_path" dev="configfs" ino=16114 res=0 errno=0
[  214.429682][   T30] audit: type=1800 audit(1785866086.974:294): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.404" name="enable" dev="configfs" ino=16116 res=0 errno=0
[  214.482039][   T30] audit: type=1800 audit(1785866086.974:295): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.404" name="addr_trtype" dev="configfs" ino=16117 res=0 errno=0
[  214.520612][   T48] nvme nvme1: rdma_resolve_route failed (-110).
[  214.533394][ T7578] nvme nvme1: rdma connection establishment failed (-19)
[  214.533580][   T30] audit: type=1800 audit(1785866087.024:296): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.404" name="addr_traddr" dev="configfs" ino=16118 res=0 errno=0
[  214.570016][   T30] audit: type=1800 audit(1785866087.134:297): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.405" name="idVendor" dev="configfs" ino=16121 res=0 errno=0
[  214.599156][   T30] audit: type=1800 audit(1785866087.144:298): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.405" name="idProduct" dev="configfs" ino=16122 res=0 errno=0
[  214.670755][   T30] audit: type=1800 audit(1785866087.154:299): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.405" name="UDC" dev="configfs" ino=16123 res=0 errno=0
[  215.032793][ T7567] NFSD: Unable to initialize client recovery tracking! (-110)
[  215.040448][ T7567] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  215.060904][ T7567] NFSD: starting 90-second grace period (net f00003d0)
[  215.099237][ T7606] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  215.169384][ T7606] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  215.211348][ T7606] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  215.225894][ T7601] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  215.369511][ T1166] nvme nvme1: rdma_resolve_route failed (-110).
[  215.408355][ T7601] nvme nvme1: rdma connection establishment failed (-19)
[  215.731371][ T5857] gspca_zc3xx: reg_r err -71
[  215.773680][ T7621] device-mapper: table: 248:0: too large device
[  215.801863][ T7621] device-mapper: ioctl: error adding target to table
[  215.860212][   T29] libceph: mon0 (1)127.0.0.1:8080 socket closed (con state V1_BANNER)
[  215.872535][ T7603] ceph: No mds server is up or the cluster is laggy
[  216.178745][ T5642] Bluetooth: hci1: command 0x0406 tx timeout
[  216.189286][ T4937] Bluetooth: hci4: command 0x0406 tx timeout
[  216.198206][   T50] Bluetooth: hci5: command 0x0406 tx timeout
[  216.201004][ T5645] Bluetooth: hci3: command 0x0406 tx timeout
[  216.204823][ T5642] Bluetooth: hci2: command 0x0406 tx timeout
[  216.309008][  T139] nvmet: connect request for invalid subsystem te!
[  216.322598][ T5857] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  216.334303][ T7627] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "te"
[  216.366896][ T5857] gspca_zc3xx 3-1:1.0: probe with driver gspca_zc3xx failed with error -71
[  216.455278][ T5857] usb 3-1: USB disconnect, device number 8
[  216.556265][ T7635] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  216.735329][ T7635] md: invalid raid superblock magic on ram0
[  216.737986][ T7595] loop0: detected capacity change from 0 to 65536
[  216.753352][ T7635] md: ram0 does not have a valid v0.90 superblock, not importing!
[  216.829856][ T7595] XFS (loop0): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  216.986407][ T7595] XFS (loop0): Ending clean mount
[  217.001820][ T5857] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  217.180844][ T5857] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00
[  217.205027][ T7661] siw: device registration error -23
[  217.210525][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  217.248549][ T5857] usb 8-1: Product: syz
[  217.277151][ T5857] usb 8-1: Manufacturer: syz
[  217.284356][ T7661] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  217.311079][ T5625] XFS (loop0): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  217.338014][ T7661] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  217.356396][ T5857] input: Samsung SUR40 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input12
[  217.689270][ T1166] nvme nvme1: rdma_resolve_route failed (-110).
[  217.752676][ T7661] nvme nvme1: rdma connection establishment failed (-19)
[  217.968278][ T7680] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  218.021050][ T7682] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  218.081290][ T7679] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  218.138238][ T7680] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  218.298185][ T7692] device-mapper: table: 248:0: too large device
[  218.329465][ T7691] PM: suspend entry (s2idle)
[  218.379789][ T7692] device-mapper: ioctl: error adding target to table
[  218.500287][ T1166] nvme nvme1: rdma_resolve_route failed (-110).
[  218.560858][ T7682] nvme nvme1: rdma connection establishment failed (-19)
[  218.607001][  T139] Filesystems sync: 0.230 seconds
[  218.607298][ T5857] videodev: could not get a free minor
[  218.607322][ T5857] sur40 8-1:1.0: Unable to register video subdevice.
[  218.607422][ T5857] sur40 8-1:1.0: probe with driver sur40 failed with error -23
[  218.629886][ T5857] usb 8-1: USB disconnect, device number 2
[  218.862223][ T6149] ==================================================================
[  218.870331][ T6149] BUG: KASAN: slab-use-after-free in sur40_open+0x46c/0x500
[  218.877647][ T6149] Read of size 8 at addr ffff888088762000 by task udevd/6149
[  218.885021][ T6149] 
[  218.887342][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  218.887383][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  218.887405][ T6149] Call Trace:
[  218.887416][ T6149]  <TASK>
[  218.887429][ T6149]  dump_stack_lvl+0x100/0x190
[  218.887469][ T6149]  print_report+0x13d/0x4b0
[  218.887522][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  218.887565][ T6149]  ? __virt_addr_valid+0x239/0x430
[  218.887609][ T6149]  ? sur40_open+0x46c/0x500
[  218.887652][ T6149]  kasan_report+0xdf/0x1c0
[  218.887690][ T6149]  ? sur40_open+0x46c/0x500
[  218.887736][ T6149]  ? __pfx_sur40_open+0x10/0x10
[  218.887779][ T6149]  sur40_open+0x46c/0x500
[  218.887823][ T6149]  input_open_device+0x24c/0x3d0
[  218.887868][ T6149]  evdev_open+0x52f/0x690
[  218.887927][ T6149]  ? __pfx_evdev_open+0x10/0x10
[  218.887982][ T6149]  chrdev_open+0x234/0x6a0
[  218.888033][ T6149]  ? __pfx_apparmor_file_open+0x10/0x10
[  218.888074][ T6149]  ? __pfx_chrdev_open+0x10/0x10
[  218.888126][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  218.888169][ T6149]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  218.888210][ T6149]  do_dentry_open+0x6ab/0x14d0
[  218.888259][ T6149]  ? __pfx_chrdev_open+0x10/0x10
[  218.888311][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  218.888357][ T6149]  vfs_open+0x82/0x3f0
[  218.888385][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  218.888432][ T6149]  path_openat+0x2873/0x4280
[  218.888493][ T6149]  ? __pfx_path_openat+0x10/0x10
[  218.888551][ T6149]  do_file_open+0x20e/0x430
[  218.888603][ T6149]  ? __pfx_do_file_open+0x10/0x10
[  218.888671][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  218.888714][ T6149]  ? alloc_fd+0x471/0x7a0
[  218.888767][ T6149]  ? do_getname+0x191/0x390
[  218.888803][ T6149]  do_sys_openat2+0x10f/0x1e0
[  218.888836][ T6149]  ? __pfx_do_sys_openat2+0x10/0x10
[  218.888878][ T6149]  __x64_sys_openat+0x12d/0x210
[  218.888914][ T6149]  ? __pfx___x64_sys_openat+0x10/0x10
[  218.888953][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  218.889000][ T6149]  do_syscall_64+0x115/0x870
[  218.889052][ T6149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.889088][ T6149] RIP: 0033:0x7f78af0a7407
[  218.889114][ T6149] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  218.889149][ T6149] RSP: 002b:00007ffdefb96690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  218.889183][ T6149] RAX: ffffffffffffffda RBX: 00007f78af787880 RCX: 00007f78af0a7407
[  218.889207][ T6149] RDX: 0000000000080000 RSI: 00005653abfea2e0 RDI: ffffffffffffff9c
[  218.889235][ T6149] RBP: 00005653abfdcbf0 R08: 0000000000000000 R09: 0000000000000000
[  218.889257][ T6149] R10: 0000000000000000 R11: 0000000000000202 R12: 00005653a504d0c8
[  218.889280][ T6149] R13: 00005653a504d0ce R14: 00007ffdefb96c90 R15: 00005653a5053bcc
[  218.889315][ T6149]  </TASK>
[  218.889327][ T6149] 
[  219.168662][ T6149] Allocated by task 5857:
[  219.172987][ T6149]  kasan_save_stack+0x30/0x50
[  219.177710][ T6149]  kasan_save_track+0x14/0x30
[  219.182433][ T6149]  __kasan_kmalloc+0xaa/0xb0
[  219.187052][ T6149]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  219.192439][ T6149]  sur40_probe+0x1a8/0x1580
[  219.196956][ T6149]  usb_probe_interface+0x303/0x8f0
[  219.202092][ T6149]  really_probe+0x241/0xa60
[  219.206613][ T6149]  __driver_probe_device+0x20e/0x450
[  219.211919][ T6149]  driver_probe_device+0x4a/0x140
[  219.216963][ T6149]  __device_attach_driver+0x1df/0x320
[  219.222355][ T6149]  bus_for_each_drv+0x159/0x1e0
[  219.227230][ T6149]  __device_attach+0x1e4/0x4d0
[  219.232032][ T6149]  device_initial_probe+0xaf/0xd0
[  219.237083][ T6149]  bus_probe_device+0x64/0x160
[  219.241861][ T6149]  device_add+0x121d/0x1970
[  219.246387][ T6149]  usb_set_configuration+0xd97/0x1c60
[  219.251776][ T6149]  usb_generic_driver_probe+0xa1/0xe0
[  219.257155][ T6149]  usb_probe_device+0xef/0x400
[  219.261943][ T6149]  really_probe+0x241/0xa60
[  219.266460][ T6149]  __driver_probe_device+0x20e/0x450
[  219.271762][ T6149]  driver_probe_device+0x4a/0x140
[  219.276809][ T6149]  __device_attach_driver+0x1df/0x320
[  219.282200][ T6149]  bus_for_each_drv+0x159/0x1e0
[  219.287066][ T6149]  __device_attach+0x1e4/0x4d0
[  219.291848][ T6149]  device_initial_probe+0xaf/0xd0
[  219.296893][ T6149]  bus_probe_device+0x64/0x160
[  219.301664][ T6149]  device_add+0x121d/0x1970
[  219.306201][ T6149]  usb_new_device.cold+0x685/0x115c
[  219.311408][ T6149]  hub_event+0x30a3/0x4a60
[  219.315839][ T6149]  process_one_work+0xa23/0x1940
[  219.320777][ T6149]  worker_thread+0x5ef/0xe50
[  219.325367][ T6149]  kthread+0x370/0x450
[  219.329461][ T6149]  ret_from_fork+0x72b/0xd50
[  219.334062][ T6149]  ret_from_fork_asm+0x1a/0x30
[  219.338849][ T6149] 
[  219.341164][ T6149] Freed by task 5857:
[  219.345131][ T6149]  kasan_save_stack+0x30/0x50
[  219.349836][ T6149]  kasan_save_track+0x14/0x30
[  219.354535][ T6149]  kasan_save_free_info+0x3b/0x70
[  219.359575][ T6149]  __kasan_slab_free+0x5f/0x80
[  219.364340][ T6149]  kfree+0x22b/0x6c0
[  219.368245][ T6149]  sur40_probe+0xc36/0x1580
[  219.372760][ T6149]  usb_probe_interface+0x303/0x8f0
[  219.377910][ T6149]  really_probe+0x241/0xa60
[  219.382431][ T6149]  __driver_probe_device+0x20e/0x450
[  219.387744][ T6149]  driver_probe_device+0x4a/0x140
[  219.392794][ T6149]  __device_attach_driver+0x1df/0x320
[  219.398182][ T6149]  bus_for_each_drv+0x159/0x1e0
[  219.403036][ T6149]  __device_attach+0x1e4/0x4d0
[  219.407814][ T6149]  device_initial_probe+0xaf/0xd0
[  219.412887][ T6149]  bus_probe_device+0x64/0x160
[  219.417661][ T6149]  device_add+0x121d/0x1970
[  219.422194][ T6149]  usb_set_configuration+0xd97/0x1c60
[  219.427583][ T6149]  usb_generic_driver_probe+0xa1/0xe0
[  219.432961][ T6149]  usb_probe_device+0xef/0x400
[  219.437740][ T6149]  really_probe+0x241/0xa60
[  219.442281][ T6149]  __driver_probe_device+0x20e/0x450
[  219.447583][ T6149]  driver_probe_device+0x4a/0x140
[  219.452626][ T6149]  __device_attach_driver+0x1df/0x320
[  219.458014][ T6149]  bus_for_each_drv+0x159/0x1e0
[  219.462872][ T6149]  __device_attach+0x1e4/0x4d0
[  219.467651][ T6149]  device_initial_probe+0xaf/0xd0
[  219.472698][ T6149]  bus_probe_device+0x64/0x160
[  219.477478][ T6149]  device_add+0x121d/0x1970
[  219.482017][ T6149]  usb_new_device.cold+0x685/0x115c
[  219.487257][ T6149]  hub_event+0x30a3/0x4a60
[  219.491692][ T6149]  process_one_work+0xa23/0x1940
[  219.496637][ T6149]  worker_thread+0x5ef/0xe50
[  219.501228][ T6149]  kthread+0x370/0x450
[  219.505320][ T6149]  ret_from_fork+0x72b/0xd50
[  219.509923][ T6149]  ret_from_fork_asm+0x1a/0x30
[  219.514703][ T6149] 
[  219.517016][ T6149] The buggy address belongs to the object at ffff888088762000
[  219.517016][ T6149]  which belongs to the cache kmalloc-4k of size 4096
[  219.531065][ T6149] The buggy address is located 0 bytes inside of
[  219.531065][ T6149]  freed 4096-byte region [ffff888088762000, ffff888088763000)
[  219.544777][ T6149] 
[  219.547089][ T6149] The buggy address belongs to the physical page:
[  219.553484][ T6149] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x88760
[  219.562242][ T6149] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  219.570738][ T6149] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  219.578282][ T6149] page_type: f5(slab)
[  219.582277][ T6149] raw: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122
[  219.590870][ T6149] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  219.599456][ T6149] head: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122
[  219.608127][ T6149] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  219.616799][ T6149] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  219.625475][ T6149] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  219.634138][ T6149] page dumped because: kasan: bad access detected
[  219.640536][ T6149] page_owner tracks the page as allocated
[  219.646255][ T6149] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4987, tgid 4987 (udevd), ts 112971486687, free_ts 0
[  219.665461][ T6149]  post_alloc_hook+0xfd/0x120
[  219.670160][ T6149]  get_page_from_freelist+0xf48/0x3530
[  219.675638][ T6149]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  219.681569][ T6149]  new_slab+0xa2/0x640
[  219.685654][ T6149]  refill_objects+0xe3/0x410
[  219.690261][ T6149]  __pcs_replace_empty_main+0x376/0x680
[  219.695819][ T6149]  __kmalloc_noprof+0x66d/0x820
[  219.700689][ T6149]  tomoyo_realpath_from_path+0xb6/0x690
[  219.706261][ T6149]  tomoyo_check_open_permission+0x2af/0x3c0
[  219.712255][ T6149]  tomoyo_file_open+0x6b/0x90
[  219.716932][ T6149]  security_file_open+0xb5/0x1e0
[  219.721891][ T6149]  do_dentry_open+0x588/0x14d0
[  219.726672][ T6149]  vfs_open+0x82/0x3f0
[  219.730739][ T6149]  path_openat+0x2873/0x4280
[  219.735345][ T6149]  do_file_open+0x20e/0x430
[  219.739873][ T6149]  do_sys_openat2+0x10f/0x1e0
[  219.744548][ T6149] page_owner free stack trace missing
[  219.749899][ T6149] 
[  219.752208][ T6149] Memory state around the buggy address:
[  219.757830][ T6149]  ffff888088761f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  219.765889][ T6149]  ffff888088761f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  219.773949][ T6149] >ffff888088762000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  219.782002][ T6149]                    ^
[  219.786063][ T6149]  ffff888088762080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  219.794125][ T6149]  ffff888088762100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  219.802176][ T6149] ==================================================================
[  219.839067][   T10] dvb-usb: did not find the firmware file 'dvb-usb-dw3101.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  219.871491][ T7691] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  219.916831][ T7691] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  219.923605][   T10] usb 4-1: USB disconnect, device number 5
[  219.941607][ T6149] Disabling lock debugging due to kernel taint
[  219.961350][ T6149] ==================================================================
[  219.969424][ T6149] BUG: KASAN: slab-use-after-free in sur40_open+0x426/0x500
[  219.976744][ T6149] Read of size 4 at addr ffff888054914000 by task udevd/6149
[  219.984120][ T6149] 
[  219.986452][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: udevd Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  219.986508][ T6149] Tainted: [B]=BAD_PAGE
[  219.986522][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  219.986546][ T6149] Call Trace:
[  219.986557][ T6149]  <TASK>
[  219.986571][ T6149]  dump_stack_lvl+0x100/0x190
[  219.986616][ T6149]  print_report+0x13d/0x4b0
[  219.986672][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.986719][ T6149]  ? __virt_addr_valid+0x239/0x430
[  219.986772][ T6149]  ? sur40_open+0x426/0x500
[  219.986820][ T6149]  kasan_report+0xdf/0x1c0
[  219.986861][ T6149]  ? sur40_open+0x426/0x500
[  219.986910][ T6149]  ? __pfx_sur40_open+0x10/0x10
[  219.986956][ T6149]  sur40_open+0x426/0x500
[  219.987002][ T6149]  input_open_device+0x24c/0x3d0
[  219.987050][ T6149]  evdev_open+0x52f/0x690
[  219.987113][ T6149]  ? __pfx_evdev_open+0x10/0x10
[  219.987172][ T6149]  chrdev_open+0x234/0x6a0
[  219.987225][ T6149]  ? __pfx_apparmor_file_open+0x10/0x10
[  219.987270][ T6149]  ? __pfx_chrdev_open+0x10/0x10
[  219.987325][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.987371][ T6149]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  219.987414][ T6149]  do_dentry_open+0x6ab/0x14d0
[  219.987464][ T6149]  ? __pfx_chrdev_open+0x10/0x10
[  219.987519][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.987568][ T6149]  vfs_open+0x82/0x3f0
[  219.987598][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.987648][ T6149]  path_openat+0x2873/0x4280
[  219.987712][ T6149]  ? __pfx_path_openat+0x10/0x10
[  219.987779][ T6149]  do_file_open+0x20e/0x430
[  219.987835][ T6149]  ? __pfx_do_file_open+0x10/0x10
[  219.987906][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.987950][ T6149]  ? alloc_fd+0x471/0x7a0
[  219.988007][ T6149]  ? do_getname+0x191/0x390
[  219.988047][ T6149]  do_sys_openat2+0x10f/0x1e0
[  219.988082][ T6149]  ? __pfx_do_sys_openat2+0x10/0x10
[  219.988127][ T6149]  __x64_sys_openat+0x12d/0x210
[  219.988165][ T6149]  ? __pfx___x64_sys_openat+0x10/0x10
[  219.988207][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.988258][ T6149]  do_syscall_64+0x115/0x870
[  219.988314][ T6149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.988353][ T6149] RIP: 0033:0x7f78af0a7407
[  219.988382][ T6149] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  219.988420][ T6149] RSP: 002b:00007ffdefb96690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  219.988456][ T6149] RAX: ffffffffffffffda RBX: 00007f78af787880 RCX: 00007f78af0a7407
[  219.988483][ T6149] RDX: 0000000000080000 RSI: 00005653abfea2e0 RDI: ffffffffffffff9c
[  219.988509][ T6149] RBP: 00005653abfdcbf0 R08: 0000000000000000 R09: 0000000000000000
[  219.988533][ T6149] R10: 0000000000000000 R11: 0000000000000202 R12: 00005653a504d0c8
[  219.988558][ T6149] R13: 00005653a504d0ce R14: 00007ffdefb96c90 R15: 00005653a5053bcc
[  219.988595][ T6149]  </TASK>
[  219.988608][ T6149] 
[  220.273777][ T6149] Allocated by task 139:
[  220.278009][ T6149]  kasan_save_stack+0x30/0x50
[  220.282714][ T6149]  kasan_save_track+0x14/0x30
[  220.287414][ T6149]  __kasan_slab_alloc+0x89/0x90
[  220.292263][ T6149]  kmem_cache_alloc_node_noprof+0x27d/0x6b0
[  220.298180][ T6149]  kmalloc_reserve+0x148/0x350
[  220.302955][ T6149]  __alloc_skb+0x185/0x710
[  220.307384][ T6149]  wg_packet_send_keepalive+0x7a/0x300
[  220.312847][ T6149]  wg_expired_send_persistent_keepalive+0x5e/0x80
[  220.319289][ T6149]  call_timer_fn+0x19a/0x610
[  220.323877][ T6149]  __run_timers+0x757/0xb00
[  220.328384][ T6149]  run_timer_base+0x114/0x190
[  220.333063][ T6149]  run_timer_softirq+0x1a/0x50
[  220.337831][ T6149]  handle_softirqs+0x1ea/0x9b0
[  220.342604][ T6149]  __irq_exit_rcu+0x162/0x210
[  220.347288][ T6149]  irq_exit_rcu+0x9/0x30
[  220.351535][ T6149]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  220.357180][ T6149]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  220.363169][ T6149] 
[  220.365479][ T6149] Freed by task 5749:
[  220.369447][ T6149]  kasan_save_stack+0x30/0x50
[  220.374148][ T6149]  kasan_save_track+0x14/0x30
[  220.378847][ T6149]  kasan_save_free_info+0x3b/0x70
[  220.383882][ T6149]  __kasan_slab_free+0x5f/0x80
[  220.388649][ T6149]  kfree+0x22b/0x6c0
[  220.392551][ T6149]  skb_free_head+0xb9/0x160
[  220.397063][ T6149]  skb_release_data+0x6c5/0x8e0
[  220.401943][ T6149]  consume_skb+0xc4/0x110
[  220.406305][ T6149]  wg_packet_rx_poll+0xc77/0x21a0
[  220.411335][ T6149]  __napi_poll.constprop.0+0xaf/0x450
[  220.416720][ T6149]  napi_threaded_poll_loop+0x52f/0x870
[  220.422189][ T6149]  napi_threaded_poll+0x3a8/0x4b0
[  220.427227][ T6149]  kthread+0x370/0x450
[  220.431319][ T6149]  ret_from_fork+0x72b/0xd50
[  220.435923][ T6149]  ret_from_fork_asm+0x1a/0x30
[  220.440701][ T6149] 
[  220.443012][ T6149] The buggy address belongs to the object at ffff888054914000
[  220.443012][ T6149]  which belongs to the cache skbuff_small_head of size 704
[  220.457585][ T6149] The buggy address is located 0 bytes inside of
[  220.457585][ T6149]  freed 704-byte region [ffff888054914000, ffff8880549142c0)
[  220.471205][ T6149] 
[  220.473518][ T6149] The buggy address belongs to the physical page:
[  220.479913][ T6149] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54914
[  220.488668][ T6149] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  220.497163][ T6149] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  220.504704][ T6149] page_type: f5(slab)
[  220.508686][ T6149] raw: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  220.517271][ T6149] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  220.525860][ T6149] head: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  220.534532][ T6149] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  220.543203][ T6149] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  220.551877][ T6149] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  220.560535][ T6149] page dumped because: kasan: bad access detected
[  220.567021][ T6149] page_owner tracks the page as allocated
[  220.572721][ T6149] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6227, tgid 6227 (syz.0.98), ts 130796797343, free_ts 130215898113
[  220.593316][ T6149]  post_alloc_hook+0xfd/0x120
[  220.598008][ T6149]  get_page_from_freelist+0xf48/0x3530
[  220.603485][ T6149]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  220.609398][ T6149]  new_slab+0xa2/0x640
[  220.613481][ T6149]  refill_objects+0xe3/0x410
[  220.618088][ T6149]  __pcs_replace_empty_main+0x376/0x680
[  220.623659][ T6149]  kmem_cache_alloc_node_noprof+0x52c/0x6b0
[  220.629576][ T6149]  kmalloc_reserve+0x148/0x350
[  220.634341][ T6149]  __alloc_skb+0x185/0x710
[  220.638771][ T6149]  skb_copy+0x1ca/0x3a0
[  220.642941][ T6149]  mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830
[  220.649030][ T6149]  mac80211_hwsim_tx_frame+0x1b7/0x250
[  220.654511][ T6149]  mac80211_hwsim_beacon_tx+0x56c/0xa00
[  220.660074][ T6149]  __iterate_interfaces+0x2e6/0x650
[  220.665311][ T6149]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  220.672356][ T6149]  mac80211_hwsim_beacon+0xe5/0x2a0
[  220.677561][ T6149] page last free pid 5624 tgid 5624 stack trace:
[  220.683873][ T6149]  __free_frozen_pages+0x79f/0x1090
[  220.689079][ T6149]  qlist_free_all+0x47/0xf0
[  220.693602][ T6149]  kasan_quarantine_reduce+0x1a0/0x1f0
[  220.699084][ T6149]  __kasan_slab_alloc+0x69/0x90
[  220.703938][ T6149]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  220.709428][ T6149]  do_getname+0x35/0x390
[  220.713675][ T6149]  __x64_sys_unlink+0x36/0x70
[  220.718382][ T6149]  do_syscall_64+0x115/0x870
[  220.722985][ T6149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.728883][ T6149] 
[  220.731190][ T6149] Memory state around the buggy address:
[  220.736815][ T6149]  ffff888054913f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  220.744873][ T6149]  ffff888054913f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  220.752932][ T6149] >ffff888054914000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  220.760981][ T6149]                    ^
[  220.765036][ T6149]  ffff888054914080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  220.773095][ T6149]  ffff888054914100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  220.781146][ T6149] ==================================================================
[  220.830342][ T6149] ==================================================================
[  220.835394][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  220.835417][   T30] audit: type=1800 audit(1785866093.554:331): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.429" name="local" dev="configfs" ino=17296 res=0 errno=0
[  220.838422][ T6149] BUG: KASAN: slab-use-after-free in usb_submit_urb+0x1510/0x19b0
[  220.872191][ T6149] Read of size 4 at addr ffff888054914018 by task udevd/6149
[  220.879569][ T6149] 
[  220.881910][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: udevd Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  220.881967][ T6149] Tainted: [B]=BAD_PAGE
[  220.881982][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  220.882005][ T6149] Call Trace:
[  220.882017][ T6149]  <TASK>
[  220.882031][ T6149]  dump_stack_lvl+0x100/0x190
[  220.882077][ T6149]  print_report+0x13d/0x4b0
[  220.882132][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.882180][ T6149]  ? __virt_addr_valid+0x239/0x430
[  220.882235][ T6149]  ? usb_submit_urb+0x1510/0x19b0
[  220.882281][ T6149]  kasan_report+0xdf/0x1c0
[  220.882323][ T6149]  ? usb_submit_urb+0x1510/0x19b0
[  220.882372][ T6149]  usb_submit_urb+0x1510/0x19b0
[  220.882417][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.882465][ T6149]  ? lockdep_init_map_type+0x5c/0x250
[  220.882512][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.882558][ T6149]  ? __init_swait_queue_head+0xca/0x150
[  220.882612][ T6149]  usb_start_wait_urb+0x10e/0x580
[  220.882658][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.882707][ T6149]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  220.882752][ T6149]  ? trace_kmalloc+0xeb/0x110
[  220.882798][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.882845][ T6149]  ? __asan_memset+0x23/0x50
[  220.882898][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.882948][ T6149]  usb_control_msg+0x328/0x4b0
[  220.882994][ T6149]  ? __pfx_usb_control_msg+0x10/0x10
[  220.883041][ T6149]  ? sur40_open+0x426/0x500
[  220.883092][ T6149]  ? __pfx_sur40_open+0x10/0x10
[  220.883139][ T6149]  sur40_open+0xf5/0x500
[  220.883189][ T6149]  input_open_device+0x24c/0x3d0
[  220.883242][ T6149]  evdev_open+0x52f/0x690
[  220.883306][ T6149]  ? __pfx_evdev_open+0x10/0x10
[  220.883367][ T6149]  chrdev_open+0x234/0x6a0
[  220.883422][ T6149]  ? __pfx_apparmor_file_open+0x10/0x10
[  220.883468][ T6149]  ? __pfx_chrdev_open+0x10/0x10
[  220.883524][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.883571][ T6149]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  220.883617][ T6149]  do_dentry_open+0x6ab/0x14d0
[  220.883668][ T6149]  ? __pfx_chrdev_open+0x10/0x10
[  220.883725][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.883774][ T6149]  vfs_open+0x82/0x3f0
[  220.883806][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.883857][ T6149]  path_openat+0x2873/0x4280
[  220.883924][ T6149]  ? __pfx_path_openat+0x10/0x10
[  220.883985][ T6149]  do_file_open+0x20e/0x430
[  220.884043][ T6149]  ? __pfx_do_file_open+0x10/0x10
[  220.884116][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.884164][ T6149]  ? alloc_fd+0x471/0x7a0
[  220.884229][ T6149]  ? do_getname+0x191/0x390
[  220.884269][ T6149]  do_sys_openat2+0x10f/0x1e0
[  220.884306][ T6149]  ? __pfx_do_sys_openat2+0x10/0x10
[  220.884352][ T6149]  __x64_sys_openat+0x12d/0x210
[  220.884389][ T6149]  ? __pfx___x64_sys_openat+0x10/0x10
[  220.884432][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.884483][ T6149]  do_syscall_64+0x115/0x870
[  220.884540][ T6149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.884580][ T6149] RIP: 0033:0x7f78af0a7407
[  220.884609][ T6149] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  220.884647][ T6149] RSP: 002b:00007ffdefb96690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  220.884685][ T6149] RAX: ffffffffffffffda RBX: 00007f78af787880 RCX: 00007f78af0a7407
[  220.884711][ T6149] RDX: 0000000000080000 RSI: 00005653abfea2e0 RDI: ffffffffffffff9c
[  220.884738][ T6149] RBP: 00005653abfdcbf0 R08: 0000000000000000 R09: 0000000000000000
[  220.884762][ T6149] R10: 0000000000000000 R11: 0000000000000202 R12: 00005653a504d0c8
[  220.884787][ T6149] R13: 00005653a504d0ce R14: 00007ffdefb96c90 R15: 00005653a5053bcc
[  220.884825][ T6149]  </TASK>
[  220.884839][ T6149] 
[  221.248640][ T6149] Allocated by task 139:
[  221.252875][ T6149]  kasan_save_stack+0x30/0x50
[  221.257581][ T6149]  kasan_save_track+0x14/0x30
[  221.262282][ T6149]  __kasan_slab_alloc+0x89/0x90
[  221.267134][ T6149]  kmem_cache_alloc_node_noprof+0x27d/0x6b0
[  221.273048][ T6149]  kmalloc_reserve+0x148/0x350
[  221.277814][ T6149]  __alloc_skb+0x185/0x710
[  221.282243][ T6149]  wg_packet_send_keepalive+0x7a/0x300
[  221.287707][ T6149]  wg_expired_send_persistent_keepalive+0x5e/0x80
[  221.294177][ T6149]  call_timer_fn+0x19a/0x610
[  221.298774][ T6149]  __run_timers+0x757/0xb00
[  221.303280][ T6149]  run_timer_base+0x114/0x190
[  221.307960][ T6149]  run_timer_softirq+0x1a/0x50
[  221.312726][ T6149]  handle_softirqs+0x1ea/0x9b0
[  221.317497][ T6149]  __irq_exit_rcu+0x162/0x210
[  221.322218][ T6149]  irq_exit_rcu+0x9/0x30
[  221.326476][ T6149]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  221.332121][ T6149]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.338108][ T6149] 
[  221.340418][ T6149] Freed by task 5749:
[  221.344386][ T6149]  kasan_save_stack+0x30/0x50
[  221.349085][ T6149]  kasan_save_track+0x14/0x30
[  221.353805][ T6149]  kasan_save_free_info+0x3b/0x70
[  221.358843][ T6149]  __kasan_slab_free+0x5f/0x80
[  221.363606][ T6149]  kfree+0x22b/0x6c0
[  221.367511][ T6149]  skb_free_head+0xb9/0x160
[  221.372021][ T6149]  skb_release_data+0x6c5/0x8e0
[  221.376888][ T6149]  consume_skb+0xc4/0x110
[  221.381241][ T6149]  wg_packet_rx_poll+0xc77/0x21a0
[  221.386270][ T6149]  __napi_poll.constprop.0+0xaf/0x450
[  221.391654][ T6149]  napi_threaded_poll_loop+0x52f/0x870
[  221.397128][ T6149]  napi_threaded_poll+0x3a8/0x4b0
[  221.402161][ T6149]  kthread+0x370/0x450
[  221.406255][ T6149]  ret_from_fork+0x72b/0xd50
[  221.410856][ T6149]  ret_from_fork_asm+0x1a/0x30
[  221.415724][ T6149] 
[  221.418038][ T6149] The buggy address belongs to the object at ffff888054914000
[  221.418038][ T6149]  which belongs to the cache skbuff_small_head of size 704
[  221.432611][ T6149] The buggy address is located 24 bytes inside of
[  221.432611][ T6149]  freed 704-byte region [ffff888054914000, ffff8880549142c0)
[  221.446322][ T6149] 
[  221.448631][ T6149] The buggy address belongs to the physical page:
[  221.455037][ T6149] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54914
[  221.463796][ T6149] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  221.472290][ T6149] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  221.479830][ T6149] page_type: f5(slab)
[  221.483809][ T6149] raw: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  221.492394][ T6149] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  221.500979][ T6149] head: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  221.509649][ T6149] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  221.518320][ T6149] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  221.526992][ T6149] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  221.535655][ T6149] page dumped because: kasan: bad access detected
[  221.542057][ T6149] page_owner tracks the page as allocated
[  221.547755][ T6149] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6227, tgid 6227 (syz.0.98), ts 130796797343, free_ts 130215898113
[  221.568345][ T6149]  post_alloc_hook+0xfd/0x120
[  221.573039][ T6149]  get_page_from_freelist+0xf48/0x3530
[  221.578514][ T6149]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  221.584428][ T6149]  new_slab+0xa2/0x640
[  221.588508][ T6149]  refill_objects+0xe3/0x410
[  221.593112][ T6149]  __pcs_replace_empty_main+0x376/0x680
[  221.598669][ T6149]  kmem_cache_alloc_node_noprof+0x52c/0x6b0
[  221.604583][ T6149]  kmalloc_reserve+0x148/0x350
[  221.609347][ T6149]  __alloc_skb+0x185/0x710
[  221.613776][ T6149]  skb_copy+0x1ca/0x3a0
[  221.617946][ T6149]  mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830
[  221.624029][ T6149]  mac80211_hwsim_tx_frame+0x1b7/0x250
[  221.629505][ T6149]  mac80211_hwsim_beacon_tx+0x56c/0xa00
[  221.635069][ T6149]  __iterate_interfaces+0x2e6/0x650
[  221.640280][ T6149]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  221.647323][ T6149]  mac80211_hwsim_beacon+0xe5/0x2a0
[  221.652529][ T6149] page last free pid 5624 tgid 5624 stack trace:
[  221.658844][ T6149]  __free_frozen_pages+0x79f/0x1090
[  221.664053][ T6149]  qlist_free_all+0x47/0xf0
[  221.668576][ T6149]  kasan_quarantine_reduce+0x1a0/0x1f0
[  221.674053][ T6149]  __kasan_slab_alloc+0x69/0x90
[  221.678901][ T6149]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  221.684384][ T6149]  do_getname+0x35/0x390
[  221.688628][ T6149]  __x64_sys_unlink+0x36/0x70
[  221.693329][ T6149]  do_syscall_64+0x115/0x870
[  221.697935][ T6149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.703829][ T6149] 
[  221.706141][ T6149] Memory state around the buggy address:
[  221.711762][ T6149]  ffff888054913f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.719819][ T6149]  ffff888054913f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.727875][ T6149] >ffff888054914000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.735933][ T6149]                             ^
[  221.740772][ T6149]  ffff888054914080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.748829][ T6149]  ffff888054914100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.756878][ T6149] ==================================================================
[  221.779256][ T7691] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  221.797821][ T7691] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  221.819578][ T6149] ==================================================================
[  221.821754][ T5641] Bluetooth: hci4: command 0x0406 tx timeout
[  221.827649][ T6149] BUG: KASAN: slab-use-after-free in usb_control_msg+0x434/0x4b0
[  221.841304][ T6149] Read of size 4 at addr ffff8880549146ec by task udevd/6149
[  221.848677][ T6149] 
[  221.851003][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: udevd Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  221.851054][ T6149] Tainted: [B]=BAD_PAGE
[  221.851066][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  221.851087][ T6149] Call Trace:
[  221.851098][ T6149]  <TASK>
[  221.851111][ T6149]  dump_stack_lvl+0x100/0x190
[  221.851150][ T6149]  print_report+0x13d/0x4b0
[  221.851202][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.851245][ T6149]  ? __virt_addr_valid+0x239/0x430
[  221.851288][ T6149]  ? usb_control_msg+0x434/0x4b0
[  221.851329][ T6149]  kasan_report+0xdf/0x1c0
[  221.851367][ T6149]  ? usb_control_msg+0x434/0x4b0
[  221.851412][ T6149]  usb_control_msg+0x434/0x4b0
[  221.851453][ T6149]  ? __pfx_usb_control_msg+0x10/0x10
[  221.851495][ T6149]  ? sur40_open+0x426/0x500
[  221.851541][ T6149]  ? __pfx_sur40_open+0x10/0x10
[  221.851584][ T6149]  sur40_open+0xf5/0x500
[  221.851628][ T6149]  input_open_device+0x24c/0x3d0
[  221.851672][ T6149]  evdev_open+0x52f/0x690
[  221.851738][ T6149]  ? __pfx_evdev_open+0x10/0x10
[  221.851794][ T6149]  chrdev_open+0x234/0x6a0
[  221.851845][ T6149]  ? __pfx_apparmor_file_open+0x10/0x10
[  221.851886][ T6149]  ? __pfx_chrdev_open+0x10/0x10
[  221.851937][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.851980][ T6149]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  221.852021][ T6149]  do_dentry_open+0x6ab/0x14d0
[  221.852068][ T6149]  ? __pfx_chrdev_open+0x10/0x10
[  221.852120][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.852165][ T6149]  vfs_open+0x82/0x3f0
[  221.852193][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.852239][ T6149]  path_openat+0x2873/0x4280
[  221.852299][ T6149]  ? __pfx_path_openat+0x10/0x10
[  221.852356][ T6149]  do_file_open+0x20e/0x430
[  221.852407][ T6149]  ? __pfx_do_file_open+0x10/0x10
[  221.852473][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.852516][ T6149]  ? alloc_fd+0x471/0x7a0
[  221.852568][ T6149]  ? do_getname+0x191/0x390
[  221.852604][ T6149]  do_sys_openat2+0x10f/0x1e0
[  221.852637][ T6149]  ? __pfx_do_sys_openat2+0x10/0x10
[  221.852678][ T6149]  __x64_sys_openat+0x12d/0x210
[  221.852713][ T6149]  ? __pfx___x64_sys_openat+0x10/0x10
[  221.852756][ T6149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.852802][ T6149]  do_syscall_64+0x115/0x870
[  221.852854][ T6149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.852890][ T6149] RIP: 0033:0x7f78af0a7407
[  221.852916][ T6149] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  221.852951][ T6149] RSP: 002b:00007ffdefb96690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  221.852986][ T6149] RAX: ffffffffffffffda RBX: 00007f78af787880 RCX: 00007f78af0a7407
[  221.853010][ T6149] RDX: 0000000000080000 RSI: 00005653abfea2e0 RDI: ffffffffffffff9c
[  221.853033][ T6149] RBP: 00005653abfdcbf0 R08: 0000000000000000 R09: 0000000000000000
[  221.853056][ T6149] R10: 0000000000000000 R11: 0000000000000202 R12: 00005653a504d0c8
[  221.853078][ T6149] R13: 00005653a504d0ce R14: 00007ffdefb96c90 R15: 00005653a5053bcc
[  221.853112][ T6149]  </TASK>
[  221.853124][ T6149] 
[  222.153421][ T6149] Allocated by task 139:
[  222.157652][ T6149]  kasan_save_stack+0x30/0x50
[  222.162358][ T6149]  kasan_save_track+0x14/0x30
[  222.167057][ T6149]  __kasan_slab_alloc+0x89/0x90
[  222.171906][ T6149]  kmem_cache_alloc_node_noprof+0x27d/0x6b0
[  222.177825][ T6149]  kmalloc_reserve+0x148/0x350
[  222.182599][ T6149]  __alloc_skb+0x185/0x710
[  222.187032][ T6149]  ndisc_alloc_skb+0xd8/0x530
[  222.191729][ T6149]  ndisc_send_rs+0x370/0x680
[  222.196338][ T6149]  addrconf_rs_timer+0x424/0x880
[  222.201290][ T6149]  call_timer_fn+0x19a/0x610
[  222.205879][ T6149]  __run_timers+0x757/0xb00
[  222.210383][ T6149]  run_timer_base+0x114/0x190
[  222.215064][ T6149]  run_timer_softirq+0x1a/0x50
[  222.219832][ T6149]  handle_softirqs+0x1ea/0x9b0
[  222.224610][ T6149]  __irq_exit_rcu+0x162/0x210
[  222.229298][ T6149]  irq_exit_rcu+0x9/0x30
[  222.233546][ T6149]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  222.239192][ T6149]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.245183][ T6149] 
[  222.247493][ T6149] Freed by task 1166:
[  222.251459][ T6149]  kasan_save_stack+0x30/0x50
[  222.256167][ T6149]  kasan_save_track+0x14/0x30
[  222.260874][ T6149]  kasan_save_free_info+0x3b/0x70
[  222.265912][ T6149]  __kasan_slab_free+0x5f/0x80
[  222.270678][ T6149]  kfree+0x22b/0x6c0
[  222.274583][ T6149]  skb_free_head+0xb9/0x160
[  222.279096][ T6149]  skb_release_data+0x6c5/0x8e0
[  222.283962][ T6149]  consume_skb+0xc4/0x110
[  222.288310][ T6149]  macvlan_process_broadcast+0x2b2/0x690
[  222.293966][ T6149]  process_one_work+0xa23/0x1940
[  222.298902][ T6149]  worker_thread+0x5ef/0xe50
[  222.303491][ T6149]  kthread+0x370/0x450
[  222.307579][ T6149]  ret_from_fork+0x72b/0xd50
[  222.312182][ T6149]  ret_from_fork_asm+0x1a/0x30
[  222.316969][ T6149] 
[  222.319279][ T6149] The buggy address belongs to the object at ffff888054914680
[  222.319279][ T6149]  which belongs to the cache skbuff_small_head of size 704
[  222.333851][ T6149] The buggy address is located 108 bytes inside of
[  222.333851][ T6149]  freed 704-byte region [ffff888054914680, ffff888054914940)
[  222.347649][ T6149] 
[  222.349959][ T6149] The buggy address belongs to the physical page:
[  222.356354][ T6149] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54914
[  222.365111][ T6149] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  222.373609][ T6149] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  222.381153][ T6149] page_type: f5(slab)
[  222.385135][ T6149] raw: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  222.393720][ T6149] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  222.402309][ T6149] head: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  222.410981][ T6149] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  222.419656][ T6149] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  222.428329][ T6149] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  222.436989][ T6149] page dumped because: kasan: bad access detected
[  222.443390][ T6149] page_owner tracks the page as allocated
[  222.449090][ T6149] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6227, tgid 6227 (syz.0.98), ts 130796797343, free_ts 130215898113
[  222.469689][ T6149]  post_alloc_hook+0xfd/0x120
[  222.474386][ T6149]  get_page_from_freelist+0xf48/0x3530
[  222.479863][ T6149]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  222.485774][ T6149]  new_slab+0xa2/0x640
[  222.489858][ T6149]  refill_objects+0xe3/0x410
[  222.494491][ T6149]  __pcs_replace_empty_main+0x376/0x680
[  222.500051][ T6149]  kmem_cache_alloc_node_noprof+0x52c/0x6b0
[  222.505968][ T6149]  kmalloc_reserve+0x148/0x350
[  222.510735][ T6149]  __alloc_skb+0x185/0x710
[  222.515163][ T6149]  skb_copy+0x1ca/0x3a0
[  222.519340][ T6149]  mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830
[  222.525424][ T6149]  mac80211_hwsim_tx_frame+0x1b7/0x250
[  222.530898][ T6149]  mac80211_hwsim_beacon_tx+0x56c/0xa00
[  222.536461][ T6149]  __iterate_interfaces+0x2e6/0x650
[  222.541673][ T6149]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  222.548718][ T6149]  mac80211_hwsim_beacon+0xe5/0x2a0
[  222.553924][ T6149] page last free pid 5624 tgid 5624 stack trace:
[  222.560240][ T6149]  __free_frozen_pages+0x79f/0x1090
[  222.565445][ T6149]  qlist_free_all+0x47/0xf0
[  222.569977][ T6149]  kasan_quarantine_reduce+0x1a0/0x1f0
[  222.575554][ T6149]  __kasan_slab_alloc+0x69/0x90
[  222.580406][ T6149]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  222.585884][ T6149]  do_getname+0x35/0x390
[  222.590127][ T6149]  __x64_sys_unlink+0x36/0x70
[  222.594826][ T6149]  do_syscall_64+0x115/0x870
[  222.599431][ T6149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.605329][ T6149] 
[  222.607637][ T6149] Memory state around the buggy address:
[  222.613255][ T6149]  ffff888054914580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  222.621311][ T6149]  ffff888054914600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  222.629369][ T6149] >ffff888054914680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  222.637419][ T6149]                                                           ^
[  222.644862][ T6149]  ffff888054914700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  222.652923][ T6149]  ffff888054914780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  222.660974][ T6149] ==================================================================
[  222.752824][ T7691] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  222.759432][ T4972] ==================================================================
[  222.767586][ T4972] BUG: KASAN: slab-use-after-free in sur40_open+0x46c/0x500
[  222.774898][ T4972] Read of size 8 at addr ffff888088762000 by task acpid/4972
[  222.776064][ T7691] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  222.782270][ T4972] 
[  222.782294][ T4972] CPU: 1 UID: 0 PID: 4972 Comm: acpid Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  222.782349][ T4972] Tainted: [B]=BAD_PAGE
[  222.782362][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  222.782386][ T4972] Call Trace:
[  222.782398][ T4972]  <TASK>
[  222.782412][ T4972]  dump_stack_lvl+0x100/0x190
[  222.782455][ T4972]  print_report+0x13d/0x4b0
[  222.782511][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.782557][ T4972]  ? __virt_addr_valid+0x239/0x430
[  222.782603][ T4972]  ? sur40_open+0x46c/0x500
[  222.782649][ T4972]  kasan_report+0xdf/0x1c0
[  222.782689][ T4972]  ? sur40_open+0x46c/0x500
[  222.782738][ T4972]  ? __pfx_sur40_open+0x10/0x10
[  222.782783][ T4972]  sur40_open+0x46c/0x500
[  222.782830][ T4972]  input_open_device+0x24c/0x3d0
[  222.782878][ T4972]  mousedev_open_device+0xe2/0x140
[  222.782931][ T4972]  mousedev_open+0x2fd/0x580
[  222.782984][ T4972]  ? __pfx_mousedev_open+0x10/0x10
[  222.783035][ T4972]  chrdev_open+0x234/0x6a0
[  222.783088][ T4972]  ? __pfx_apparmor_file_open+0x10/0x10
[  222.783132][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  222.783186][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.783236][ T4972]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  222.783278][ T4972]  do_dentry_open+0x6ab/0x14d0
[  222.783327][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  222.783381][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.783429][ T4972]  vfs_open+0x82/0x3f0
[  222.783459][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.783507][ T4972]  path_openat+0x2873/0x4280
[  222.783570][ T4972]  ? __pfx_path_openat+0x10/0x10
[  222.783630][ T4972]  do_file_open+0x20e/0x430
[  222.783685][ T4972]  ? __pfx_do_file_open+0x10/0x10
[  222.783754][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.783799][ T4972]  ? alloc_fd+0x471/0x7a0
[  222.783854][ T4972]  ? do_getname+0x191/0x390
[  222.783893][ T4972]  do_sys_openat2+0x10f/0x1e0
[  222.783928][ T4972]  ? __pfx_do_sys_openat2+0x10/0x10
[  222.783962][ T4972]  ? __x64_sys_rt_sigprocmask+0x28f/0x410
[  222.784006][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.784050][ T4972]  ? rcu_is_watching+0x12/0xc0
[  222.784104][ T4972]  ? _raw_spin_unlock_irq+0x23/0x50
[  222.784148][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.784193][ T4972]  ? lockdep_hardirqs_on+0x78/0x100
[  222.784249][ T4972]  __x64_sys_openat+0x12d/0x210
[  222.784286][ T4972]  ? __pfx___x64_sys_openat+0x10/0x10
[  222.784322][ T4972]  ? ksys_read+0x1ac/0x250
[  222.784371][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.784419][ T4972]  do_syscall_64+0x115/0x870
[  222.784472][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.784510][ T4972] RIP: 0033:0x7f8378751407
[  222.784538][ T4972] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  222.784575][ T4972] RSP: 002b:00007ffe9e81c700 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  222.784611][ T4972] RAX: ffffffffffffffda RBX: 00007f83786c7780 RCX: 00007f8378751407
[  222.784637][ T4972] RDX: 0000000000080800 RSI: 00007ffe9e81c910 RDI: ffffffffffffff9c
[  222.784662][ T4972] RBP: 00007ffe9e81c910 R08: 0000000000000000 R09: 0000000000000000
[  222.784686][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020
[  222.784710][ T4972] R13: 00007ffe9e81ca10 R14: 0000555bd09bf7fe R15: 00007ffe9e81ca10
[  222.784746][ T4972]  </TASK>
[  222.784759][ T4972] 
[  223.117397][ T4972] Allocated by task 5857:
[  223.121715][ T4972]  kasan_save_stack+0x30/0x50
[  223.126420][ T4972]  kasan_save_track+0x14/0x30
[  223.131118][ T4972]  __kasan_kmalloc+0xaa/0xb0
[  223.135726][ T4972]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  223.141111][ T4972]  sur40_probe+0x1a8/0x1580
[  223.145631][ T4972]  usb_probe_interface+0x303/0x8f0
[  223.150770][ T4972]  really_probe+0x241/0xa60
[  223.155290][ T4972]  __driver_probe_device+0x20e/0x450
[  223.160594][ T4972]  driver_probe_device+0x4a/0x140
[  223.165636][ T4972]  __device_attach_driver+0x1df/0x320
[  223.171029][ T4972]  bus_for_each_drv+0x159/0x1e0
[  223.175884][ T4972]  __device_attach+0x1e4/0x4d0
[  223.180671][ T4972]  device_initial_probe+0xaf/0xd0
[  223.185715][ T4972]  bus_probe_device+0x64/0x160
[  223.190486][ T4972]  device_add+0x121d/0x1970
[  223.195010][ T4972]  usb_set_configuration+0xd97/0x1c60
[  223.200397][ T4972]  usb_generic_driver_probe+0xa1/0xe0
[  223.205775][ T4972]  usb_probe_device+0xef/0x400
[  223.210556][ T4972]  really_probe+0x241/0xa60
[  223.215071][ T4972]  __driver_probe_device+0x20e/0x450
[  223.220373][ T4972]  driver_probe_device+0x4a/0x140
[  223.225411][ T4972]  __device_attach_driver+0x1df/0x320
[  223.230802][ T4972]  bus_for_each_drv+0x159/0x1e0
[  223.235658][ T4972]  __device_attach+0x1e4/0x4d0
[  223.240438][ T4972]  device_initial_probe+0xaf/0xd0
[  223.245481][ T4972]  bus_probe_device+0x64/0x160
[  223.250254][ T4972]  device_add+0x121d/0x1970
[  223.254777][ T4972]  usb_new_device.cold+0x685/0x115c
[  223.259985][ T4972]  hub_event+0x30a3/0x4a60
[  223.264421][ T4972]  process_one_work+0xa23/0x1940
[  223.269376][ T4972]  worker_thread+0x5ef/0xe50
[  223.273966][ T4972]  kthread+0x370/0x450
[  223.278060][ T4972]  ret_from_fork+0x72b/0xd50
[  223.282664][ T4972]  ret_from_fork_asm+0x1a/0x30
[  223.287446][ T4972] 
[  223.289754][ T4972] Freed by task 5857:
[  223.293720][ T4972]  kasan_save_stack+0x30/0x50
[  223.298423][ T4972]  kasan_save_track+0x14/0x30
[  223.303120][ T4972]  kasan_save_free_info+0x3b/0x70
[  223.308160][ T4972]  __kasan_slab_free+0x5f/0x80
[  223.312921][ T4972]  kfree+0x22b/0x6c0
[  223.316827][ T4972]  sur40_probe+0xc36/0x1580
[  223.321338][ T4972]  usb_probe_interface+0x303/0x8f0
[  223.326472][ T4972]  really_probe+0x241/0xa60
[  223.330989][ T4972]  __driver_probe_device+0x20e/0x450
[  223.336291][ T4972]  driver_probe_device+0x4a/0x140
[  223.341334][ T4972]  __device_attach_driver+0x1df/0x320
[  223.346720][ T4972]  bus_for_each_drv+0x159/0x1e0
[  223.351573][ T4972]  __device_attach+0x1e4/0x4d0
[  223.356353][ T4972]  device_initial_probe+0xaf/0xd0
[  223.361393][ T4972]  bus_probe_device+0x64/0x160
[  223.366166][ T4972]  device_add+0x121d/0x1970
[  223.370707][ T4972]  usb_set_configuration+0xd97/0x1c60
[  223.376097][ T4972]  usb_generic_driver_probe+0xa1/0xe0
[  223.381478][ T4972]  usb_probe_device+0xef/0x400
[  223.386258][ T4972]  really_probe+0x241/0xa60
[  223.390776][ T4972]  __driver_probe_device+0x20e/0x450
[  223.396077][ T4972]  driver_probe_device+0x4a/0x140
[  223.401115][ T4972]  __device_attach_driver+0x1df/0x320
[  223.406504][ T4972]  bus_for_each_drv+0x159/0x1e0
[  223.411359][ T4972]  __device_attach+0x1e4/0x4d0
[  223.416136][ T4972]  device_initial_probe+0xaf/0xd0
[  223.421179][ T4972]  bus_probe_device+0x64/0x160
[  223.425953][ T4972]  device_add+0x121d/0x1970
[  223.430478][ T4972]  usb_new_device.cold+0x685/0x115c
[  223.435683][ T4972]  hub_event+0x30a3/0x4a60
[  223.440115][ T4972]  process_one_work+0xa23/0x1940
[  223.445052][ T4972]  worker_thread+0x5ef/0xe50
[  223.449661][ T4972]  kthread+0x370/0x450
[  223.453750][ T4972]  ret_from_fork+0x72b/0xd50
[  223.458355][ T4972]  ret_from_fork_asm+0x1a/0x30
[  223.463137][ T4972] 
[  223.465447][ T4972] The buggy address belongs to the object at ffff888088762000
[  223.465447][ T4972]  which belongs to the cache kmalloc-4k of size 4096
[  223.479497][ T4972] The buggy address is located 0 bytes inside of
[  223.479497][ T4972]  freed 4096-byte region [ffff888088762000, ffff888088763000)
[  223.493208][ T4972] 
[  223.495523][ T4972] The buggy address belongs to the physical page:
[  223.501919][ T4972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x88760
[  223.510676][ T4972] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  223.519170][ T4972] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  223.526716][ T4972] page_type: f5(slab)
[  223.530696][ T4972] raw: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122
[  223.539281][ T4972] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  223.547865][ T4972] head: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122
[  223.556536][ T4972] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  223.565208][ T4972] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  223.573887][ T4972] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  223.582550][ T4972] page dumped because: kasan: bad access detected
[  223.588948][ T4972] page_owner tracks the page as allocated
[  223.594649][ T4972] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4987, tgid 4987 (udevd), ts 112971486687, free_ts 0
[  223.613856][ T4972]  post_alloc_hook+0xfd/0x120
[  223.618551][ T4972]  get_page_from_freelist+0xf48/0x3530
[  223.624028][ T4972]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  223.629939][ T4972]  new_slab+0xa2/0x640
[  223.634020][ T4972]  refill_objects+0xe3/0x410
[  223.638626][ T4972]  __pcs_replace_empty_main+0x376/0x680
[  223.644189][ T4972]  __kmalloc_noprof+0x66d/0x820
[  223.649065][ T4972]  tomoyo_realpath_from_path+0xb6/0x690
[  223.654636][ T4972]  tomoyo_check_open_permission+0x2af/0x3c0
[  223.660544][ T4972]  tomoyo_file_open+0x6b/0x90
[  223.665220][ T4972]  security_file_open+0xb5/0x1e0
[  223.670178][ T4972]  do_dentry_open+0x588/0x14d0
[  223.674959][ T4972]  vfs_open+0x82/0x3f0
[  223.679023][ T4972]  path_openat+0x2873/0x4280
[  223.683630][ T4972]  do_file_open+0x20e/0x430
[  223.688242][ T4972]  do_sys_openat2+0x10f/0x1e0
[  223.692915][ T4972] page_owner free stack trace missing
[  223.698265][ T4972] 
[  223.700573][ T4972] Memory state around the buggy address:
[  223.706198][ T4972]  ffff888088761f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  223.714284][ T4972]  ffff888088761f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  223.722341][ T4972] >ffff888088762000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  223.730392][ T4972]                    ^
[  223.734450][ T4972]  ffff888088762080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  223.742507][ T4972]  ffff888088762100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  223.750559][ T4972] ==================================================================
[  223.803741][ T7691] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  223.809792][ T7691] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  223.830492][ T7691] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  223.838273][ T7691] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  223.840234][ T4972] ==================================================================
[  223.852215][ T4972] BUG: KASAN: slab-use-after-free in sur40_open+0x426/0x500
[  223.859506][ T4972] Read of size 4 at addr ffff888054914000 by task acpid/4972
[  223.866867][ T4972] 
[  223.869189][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: acpid Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  223.869234][ T4972] Tainted: [B]=BAD_PAGE
[  223.869244][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  223.869262][ T4972] Call Trace:
[  223.869271][ T4972]  <TASK>
[  223.869282][ T4972]  dump_stack_lvl+0x100/0x190
[  223.869315][ T4972]  print_report+0x13d/0x4b0
[  223.869356][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.869390][ T4972]  ? __virt_addr_valid+0x239/0x430
[  223.869426][ T4972]  ? sur40_open+0x426/0x500
[  223.869463][ T4972]  kasan_report+0xdf/0x1c0
[  223.869494][ T4972]  ? sur40_open+0x426/0x500
[  223.869531][ T4972]  ? __pfx_sur40_open+0x10/0x10
[  223.869565][ T4972]  sur40_open+0x426/0x500
[  223.869600][ T4972]  input_open_device+0x24c/0x3d0
[  223.869636][ T4972]  mousedev_open_device+0xe2/0x140
[  223.869676][ T4972]  mousedev_open+0x2fd/0x580
[  223.869716][ T4972]  ? __pfx_mousedev_open+0x10/0x10
[  223.869758][ T4972]  chrdev_open+0x234/0x6a0
[  223.869798][ T4972]  ? __pfx_apparmor_file_open+0x10/0x10
[  223.869831][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  223.869874][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.869908][ T4972]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  223.869941][ T4972]  do_dentry_open+0x6ab/0x14d0
[  223.869979][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  223.870020][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.870067][ T4972]  vfs_open+0x82/0x3f0
[  223.870099][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.870144][ T4972]  path_openat+0x2873/0x4280
[  223.870196][ T4972]  ? __pfx_path_openat+0x10/0x10
[  223.870259][ T4972]  do_file_open+0x20e/0x430
[  223.870311][ T4972]  ? __pfx_do_file_open+0x10/0x10
[  223.870363][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.870397][ T4972]  ? alloc_fd+0x471/0x7a0
[  223.870439][ T4972]  ? do_getname+0x191/0x390
[  223.870472][ T4972]  do_sys_openat2+0x10f/0x1e0
[  223.870499][ T4972]  ? __pfx_do_sys_openat2+0x10/0x10
[  223.870525][ T4972]  ? __x64_sys_rt_sigprocmask+0x28f/0x410
[  223.870559][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.870593][ T4972]  ? rcu_is_watching+0x12/0xc0
[  223.870633][ T4972]  ? _raw_spin_unlock_irq+0x23/0x50
[  223.870666][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.870700][ T4972]  ? lockdep_hardirqs_on+0x78/0x100
[  223.870743][ T4972]  __x64_sys_openat+0x12d/0x210
[  223.870771][ T4972]  ? __pfx___x64_sys_openat+0x10/0x10
[  223.870799][ T4972]  ? ksys_read+0x1ac/0x250
[  223.870836][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.870876][ T4972]  do_syscall_64+0x115/0x870
[  223.870916][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.870946][ T4972] RIP: 0033:0x7f8378751407
[  223.870968][ T4972] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  223.870996][ T4972] RSP: 002b:00007ffe9e81c700 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  223.871023][ T4972] RAX: ffffffffffffffda RBX: 00007f83786c7780 RCX: 00007f8378751407
[  223.871042][ T4972] RDX: 0000000000080800 RSI: 00007ffe9e81c910 RDI: ffffffffffffff9c
[  223.871061][ T4972] RBP: 00007ffe9e81c910 R08: 0000000000000000 R09: 0000000000000000
[  223.871080][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020
[  223.871098][ T4972] R13: 00007ffe9e81ca10 R14: 0000555bd09bf7fe R15: 00007ffe9e81ca10
[  223.871127][ T4972]  </TASK>
[  223.871140][ T4972] 
[  224.198048][ T4972] Allocated by task 139:
[  224.202279][ T4972]  kasan_save_stack+0x30/0x50
[  224.206985][ T4972]  kasan_save_track+0x14/0x30
[  224.211683][ T4972]  __kasan_slab_alloc+0x89/0x90
[  224.216541][ T4972]  kmem_cache_alloc_node_noprof+0x27d/0x6b0
[  224.222457][ T4972]  kmalloc_reserve+0x148/0x350
[  224.227235][ T4972]  __alloc_skb+0x185/0x710
[  224.231661][ T4972]  wg_packet_send_keepalive+0x7a/0x300
[  224.237131][ T4972]  wg_expired_send_persistent_keepalive+0x5e/0x80
[  224.243572][ T4972]  call_timer_fn+0x19a/0x610
[  224.248168][ T4972]  __run_timers+0x757/0xb00
[  224.252678][ T4972]  run_timer_base+0x114/0x190
[  224.257358][ T4972]  run_timer_softirq+0x1a/0x50
[  224.262125][ T4972]  handle_softirqs+0x1ea/0x9b0
[  224.266896][ T4972]  __irq_exit_rcu+0x162/0x210
[  224.271581][ T4972]  irq_exit_rcu+0x9/0x30
[  224.275829][ T4972]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  224.281477][ T4972]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  224.287463][ T4972] 
[  224.289774][ T4972] Freed by task 5749:
[  224.293742][ T4972]  kasan_save_stack+0x30/0x50
[  224.298445][ T4972]  kasan_save_track+0x14/0x30
[  224.303144][ T4972]  kasan_save_free_info+0x3b/0x70
[  224.308181][ T4972]  __kasan_slab_free+0x5f/0x80
[  224.312946][ T4972]  kfree+0x22b/0x6c0
[  224.316866][ T4972]  skb_free_head+0xb9/0x160
[  224.321377][ T4972]  skb_release_data+0x6c5/0x8e0
[  224.326261][ T4972]  consume_skb+0xc4/0x110
[  224.330610][ T4972]  wg_packet_rx_poll+0xc77/0x21a0
[  224.335641][ T4972]  __napi_poll.constprop.0+0xaf/0x450
[  224.341026][ T4972]  napi_threaded_poll_loop+0x52f/0x870
[  224.346495][ T4972]  napi_threaded_poll+0x3a8/0x4b0
[  224.351533][ T4972]  kthread+0x370/0x450
[  224.355625][ T4972]  ret_from_fork+0x72b/0xd50
[  224.360235][ T4972]  ret_from_fork_asm+0x1a/0x30
[  224.365013][ T4972] 
[  224.367322][ T4972] The buggy address belongs to the object at ffff888054914000
[  224.367322][ T4972]  which belongs to the cache skbuff_small_head of size 704
[  224.381892][ T4972] The buggy address is located 0 bytes inside of
[  224.381892][ T4972]  freed 704-byte region [ffff888054914000, ffff8880549142c0)
[  224.395523][ T4972] 
[  224.397838][ T4972] The buggy address belongs to the physical page:
[  224.404239][ T4972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54914
[  224.412996][ T4972] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  224.421489][ T4972] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  224.429032][ T4972] page_type: f5(slab)
[  224.433015][ T4972] raw: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  224.441601][ T4972] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  224.450186][ T4972] head: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  224.458860][ T4972] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  224.467536][ T4972] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  224.476212][ T4972] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  224.484883][ T4972] page dumped because: kasan: bad access detected
[  224.491282][ T4972] page_owner tracks the page as allocated
[  224.496981][ T4972] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6227, tgid 6227 (syz.0.98), ts 130796797343, free_ts 130215898113
[  224.517578][ T4972]  post_alloc_hook+0xfd/0x120
[  224.522276][ T4972]  get_page_from_freelist+0xf48/0x3530
[  224.527751][ T4972]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  224.533659][ T4972]  new_slab+0xa2/0x640
[  224.537741][ T4972]  refill_objects+0xe3/0x410
[  224.542346][ T4972]  __pcs_replace_empty_main+0x376/0x680
[  224.547904][ T4972]  kmem_cache_alloc_node_noprof+0x52c/0x6b0
[  224.553821][ T4972]  kmalloc_reserve+0x148/0x350
[  224.558677][ T4972]  __alloc_skb+0x185/0x710
[  224.563103][ T4972]  skb_copy+0x1ca/0x3a0
[  224.567272][ T4972]  mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830
[  224.573354][ T4972]  mac80211_hwsim_tx_frame+0x1b7/0x250
[  224.578828][ T4972]  mac80211_hwsim_beacon_tx+0x56c/0xa00
[  224.584393][ T4972]  __iterate_interfaces+0x2e6/0x650
[  224.589605][ T4972]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  224.596645][ T4972]  mac80211_hwsim_beacon+0xe5/0x2a0
[  224.601852][ T4972] page last free pid 5624 tgid 5624 stack trace:
[  224.608165][ T4972]  __free_frozen_pages+0x79f/0x1090
[  224.613374][ T4972]  qlist_free_all+0x47/0xf0
[  224.617895][ T4972]  kasan_quarantine_reduce+0x1a0/0x1f0
[  224.623373][ T4972]  __kasan_slab_alloc+0x69/0x90
[  224.628229][ T4972]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  224.633706][ T4972]  do_getname+0x35/0x390
[  224.637949][ T4972]  __x64_sys_unlink+0x36/0x70
[  224.642646][ T4972]  do_syscall_64+0x115/0x870
[  224.647253][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.653149][ T4972] 
[  224.655461][ T4972] Memory state around the buggy address:
[  224.661077][ T4972]  ffff888054913f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  224.669134][ T4972]  ffff888054913f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  224.677191][ T4972] >ffff888054914000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.685248][ T4972]                    ^
[  224.689303][ T4972]  ffff888054914080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.697359][ T4972]  ffff888054914100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.705415][ T4972] ==================================================================
[  224.721102][ T5641] Bluetooth: hci4: command 0x0406 tx timeout
[  224.727249][ T5641] Bluetooth: hci2: command 0x0406 tx timeout
[  224.735170][ T4972] ==================================================================
[  224.735890][ T7691] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  224.743236][ T4972] BUG: KASAN: slab-use-after-free in usb_submit_urb+0x1510/0x19b0
[  224.743299][ T4972] Read of size 4 at addr ffff888054914018 by task acpid/4972
[  224.743338][ T4972] 
[  224.743364][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: acpid Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  224.743437][ T4972] Tainted: [B]=BAD_PAGE
[  224.743456][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  224.743495][ T4972] Call Trace:
[  224.743511][ T4972]  <TASK>
[  224.743529][ T4972]  dump_stack_lvl+0x100/0x190
[  224.743585][ T4972]  print_report+0x13d/0x4b0
[  224.743664][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.743720][ T4972]  ? __virt_addr_valid+0x239/0x430
[  224.743793][ T4972]  ? usb_submit_urb+0x1510/0x19b0
[  224.743844][ T4972]  kasan_report+0xdf/0x1c0
[  224.743892][ T4972]  ? usb_submit_urb+0x1510/0x19b0
[  224.743950][ T4972]  usb_submit_urb+0x1510/0x19b0
[  224.744003][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.744058][ T4972]  ? lockdep_init_map_type+0x5c/0x250
[  224.744113][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.744169][ T4972]  ? __init_swait_queue_head+0xca/0x150
[  224.744223][ T4972]  usb_start_wait_urb+0x10e/0x580
[  224.744267][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.744313][ T4972]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  224.744356][ T4972]  ? trace_kmalloc+0xeb/0x110
[  224.744399][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.744444][ T4972]  ? __asan_memset+0x23/0x50
[  224.744494][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.744543][ T4972]  usb_control_msg+0x328/0x4b0
[  224.744587][ T4972]  ? __pfx_usb_control_msg+0x10/0x10
[  224.744631][ T4972]  ? sur40_open+0x426/0x500
[  224.744680][ T4972]  ? __pfx_sur40_open+0x10/0x10
[  224.744730][ T4972]  sur40_open+0xf5/0x500
[  224.744777][ T4972]  input_open_device+0x24c/0x3d0
[  224.744824][ T4972]  mousedev_open_device+0xe2/0x140
[  224.744878][ T4972]  mousedev_open+0x2fd/0x580
[  224.744930][ T4972]  ? __pfx_mousedev_open+0x10/0x10
[  224.744981][ T4972]  chrdev_open+0x234/0x6a0
[  224.745034][ T4972]  ? __pfx_apparmor_file_open+0x10/0x10
[  224.745078][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  224.745132][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.745177][ T4972]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  224.745220][ T4972]  do_dentry_open+0x6ab/0x14d0
[  224.745269][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  224.745322][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.745369][ T4972]  vfs_open+0x82/0x3f0
[  224.745400][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.745448][ T4972]  path_openat+0x2873/0x4280
[  224.745511][ T4972]  ? __pfx_path_openat+0x10/0x10
[  224.745570][ T4972]  do_file_open+0x20e/0x430
[  224.745625][ T4972]  ? __pfx_do_file_open+0x10/0x10
[  224.745697][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.745746][ T4972]  ? alloc_fd+0x471/0x7a0
[  224.745801][ T4972]  ? do_getname+0x191/0x390
[  224.745840][ T4972]  do_sys_openat2+0x10f/0x1e0
[  224.745874][ T4972]  ? __pfx_do_sys_openat2+0x10/0x10
[  224.745908][ T4972]  ? __x64_sys_rt_sigprocmask+0x28f/0x410
[  224.745952][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.745996][ T4972]  ? rcu_is_watching+0x12/0xc0
[  224.746049][ T4972]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.746094][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.746139][ T4972]  ? lockdep_hardirqs_on+0x78/0x100
[  224.746191][ T4972]  __x64_sys_openat+0x12d/0x210
[  224.746227][ T4972]  ? __pfx___x64_sys_openat+0x10/0x10
[  224.746264][ T4972]  ? ksys_read+0x1ac/0x250
[  224.746311][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.746360][ T4972]  do_syscall_64+0x115/0x870
[  224.746412][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.746450][ T4972] RIP: 0033:0x7f8378751407
[  224.746478][ T4972] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  224.746515][ T4972] RSP: 002b:00007ffe9e81c700 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  224.746551][ T4972] RAX: ffffffffffffffda RBX: 00007f83786c7780 RCX: 00007f8378751407
[  224.746577][ T4972] RDX: 0000000000080800 RSI: 00007ffe9e81c910 RDI: ffffffffffffff9c
[  224.746602][ T4972] RBP: 00007ffe9e81c910 R08: 0000000000000000 R09: 0000000000000000
[  224.746626][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020
[  224.746649][ T4972] R13: 00007ffe9e81ca10 R14: 0000555bd09bf7fe R15: 00007ffe9e81ca10
[  224.746686][ T4972]  </TASK>
[  224.746699][ T4972] 
[  224.751992][ T7691] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  224.757291][ T4972] Allocated by task 139:
[  224.757310][ T4972]  kasan_save_stack+0x30/0x50
[  225.187363][ T4972]  kasan_save_track+0x14/0x30
[  225.192078][ T4972]  __kasan_slab_alloc+0x89/0x90
[  225.196935][ T4972]  kmem_cache_alloc_node_noprof+0x27d/0x6b0
[  225.202853][ T4972]  kmalloc_reserve+0x148/0x350
[  225.207619][ T4972]  __alloc_skb+0x185/0x710
[  225.212045][ T4972]  wg_packet_send_keepalive+0x7a/0x300
[  225.217510][ T4972]  wg_expired_send_persistent_keepalive+0x5e/0x80
[  225.223963][ T4972]  call_timer_fn+0x19a/0x610
[  225.228557][ T4972]  __run_timers+0x757/0xb00
[  225.233062][ T4972]  run_timer_base+0x114/0x190
[  225.237746][ T4972]  run_timer_softirq+0x1a/0x50
[  225.242515][ T4972]  handle_softirqs+0x1ea/0x9b0
[  225.247296][ T4972]  __irq_exit_rcu+0x162/0x210
[  225.251980][ T4972]  irq_exit_rcu+0x9/0x30
[  225.256231][ T4972]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  225.261878][ T4972]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  225.267865][ T4972] 
[  225.270174][ T4972] Freed by task 5749:
[  225.274140][ T4972]  kasan_save_stack+0x30/0x50
[  225.278841][ T4972]  kasan_save_track+0x14/0x30
[  225.283540][ T4972]  kasan_save_free_info+0x3b/0x70
[  225.288577][ T4972]  __kasan_slab_free+0x5f/0x80
[  225.293340][ T4972]  kfree+0x22b/0x6c0
[  225.297247][ T4972]  skb_free_head+0xb9/0x160
[  225.301762][ T4972]  skb_release_data+0x6c5/0x8e0
[  225.306628][ T4972]  consume_skb+0xc4/0x110
[  225.310975][ T4972]  wg_packet_rx_poll+0xc77/0x21a0
[  225.316003][ T4972]  __napi_poll.constprop.0+0xaf/0x450
[  225.321388][ T4972]  napi_threaded_poll_loop+0x52f/0x870
[  225.326855][ T4972]  napi_threaded_poll+0x3a8/0x4b0
[  225.331893][ T4972]  kthread+0x370/0x450
[  225.335983][ T4972]  ret_from_fork+0x72b/0xd50
[  225.340584][ T4972]  ret_from_fork_asm+0x1a/0x30
[  225.345363][ T4972] 
[  225.347672][ T4972] The buggy address belongs to the object at ffff888054914000
[  225.347672][ T4972]  which belongs to the cache skbuff_small_head of size 704
[  225.362242][ T4972] The buggy address is located 24 bytes inside of
[  225.362242][ T4972]  freed 704-byte region [ffff888054914000, ffff8880549142c0)
[  225.375953][ T4972] 
[  225.378264][ T4972] The buggy address belongs to the physical page:
[  225.384659][ T4972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54914
[  225.393415][ T4972] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  225.401908][ T4972] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  225.409447][ T4972] page_type: f5(slab)
[  225.413426][ T4972] raw: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  225.422013][ T4972] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  225.430601][ T4972] head: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  225.439274][ T4972] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  225.447946][ T4972] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  225.456627][ T4972] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  225.465288][ T4972] page dumped because: kasan: bad access detected
[  225.471688][ T4972] page_owner tracks the page as allocated
[  225.477390][ T4972] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6227, tgid 6227 (syz.0.98), ts 130796797343, free_ts 130215898113
[  225.497984][ T4972]  post_alloc_hook+0xfd/0x120
[  225.502678][ T4972]  get_page_from_freelist+0xf48/0x3530
[  225.508156][ T4972]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  225.514067][ T4972]  new_slab+0xa2/0x640
[  225.518176][ T4972]  refill_objects+0xe3/0x410
[  225.522790][ T4972]  __pcs_replace_empty_main+0x376/0x680
[  225.528350][ T4972]  kmem_cache_alloc_node_noprof+0x52c/0x6b0
[  225.534265][ T4972]  kmalloc_reserve+0x148/0x350
[  225.539033][ T4972]  __alloc_skb+0x185/0x710
[  225.543460][ T4972]  skb_copy+0x1ca/0x3a0
[  225.547628][ T4972]  mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830
[  225.553712][ T4972]  mac80211_hwsim_tx_frame+0x1b7/0x250
[  225.559187][ T4972]  mac80211_hwsim_beacon_tx+0x56c/0xa00
[  225.564752][ T4972]  __iterate_interfaces+0x2e6/0x650
[  225.569964][ T4972]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  225.577008][ T4972]  mac80211_hwsim_beacon+0xe5/0x2a0
[  225.582213][ T4972] page last free pid 5624 tgid 5624 stack trace:
[  225.588530][ T4972]  __free_frozen_pages+0x79f/0x1090
[  225.593740][ T4972]  qlist_free_all+0x47/0xf0
[  225.598262][ T4972]  kasan_quarantine_reduce+0x1a0/0x1f0
[  225.603739][ T4972]  __kasan_slab_alloc+0x69/0x90
[  225.608589][ T4972]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  225.614072][ T4972]  do_getname+0x35/0x390
[  225.618346][ T4972]  __x64_sys_unlink+0x36/0x70
[  225.623047][ T4972]  do_syscall_64+0x115/0x870
[  225.627656][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.633553][ T4972] 
[  225.635866][ T4972] Memory state around the buggy address:
[  225.641488][ T4972]  ffff888054913f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  225.649546][ T4972]  ffff888054913f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  225.657605][ T4972] >ffff888054914000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.665658][ T4972]                             ^
[  225.670497][ T4972]  ffff888054914080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.678556][ T4972]  ffff888054914100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.686607][ T4972] ==================================================================
[  225.708146][ T7691] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  225.717276][ T7691] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  225.725075][ T5633] Bluetooth: hci3: command 0x0406 tx timeout
[  225.725686][ T7691] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  225.733405][ T4972] ==================================================================
[  225.745096][ T4972] BUG: KASAN: slab-use-after-free in usb_control_msg+0x434/0x4b0
[  225.752844][ T4972] Read of size 4 at addr ffff8880549146ec by task acpid/4972
[  225.760218][ T4972] 
[  225.762538][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: acpid Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  225.762579][ T4972] Tainted: [B]=BAD_PAGE
[  225.762589][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  225.762607][ T4972] Call Trace:
[  225.762616][ T4972]  <TASK>
[  225.762626][ T4972]  dump_stack_lvl+0x100/0x190
[  225.762659][ T4972]  print_report+0x13d/0x4b0
[  225.762715][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.762760][ T4972]  ? __virt_addr_valid+0x239/0x430
[  225.762798][ T4972]  ? usb_control_msg+0x434/0x4b0
[  225.762831][ T4972]  kasan_report+0xdf/0x1c0
[  225.762861][ T4972]  ? usb_control_msg+0x434/0x4b0
[  225.762897][ T4972]  usb_control_msg+0x434/0x4b0
[  225.762931][ T4972]  ? __pfx_usb_control_msg+0x10/0x10
[  225.762964][ T4972]  ? sur40_open+0x426/0x500
[  225.763001][ T4972]  ? __pfx_sur40_open+0x10/0x10
[  225.763035][ T4972]  sur40_open+0xf5/0x500
[  225.763070][ T4972]  input_open_device+0x24c/0x3d0
[  225.763106][ T4972]  mousedev_open_device+0xe2/0x140
[  225.763146][ T4972]  mousedev_open+0x2fd/0x580
[  225.763186][ T4972]  ? __pfx_mousedev_open+0x10/0x10
[  225.763229][ T4972]  chrdev_open+0x234/0x6a0
[  225.763268][ T4972]  ? __pfx_apparmor_file_open+0x10/0x10
[  225.763301][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  225.763342][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.763376][ T4972]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  225.763408][ T4972]  do_dentry_open+0x6ab/0x14d0
[  225.763445][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  225.763486][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.763522][ T4972]  vfs_open+0x82/0x3f0
[  225.763546][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.763583][ T4972]  path_openat+0x2873/0x4280
[  225.763630][ T4972]  ? __pfx_path_openat+0x10/0x10
[  225.763676][ T4972]  do_file_open+0x20e/0x430
[  225.763718][ T4972]  ? __pfx_do_file_open+0x10/0x10
[  225.763773][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.763821][ T4972]  ? alloc_fd+0x471/0x7a0
[  225.763870][ T4972]  ? do_getname+0x191/0x390
[  225.763899][ T4972]  do_sys_openat2+0x10f/0x1e0
[  225.763926][ T4972]  ? __pfx_do_sys_openat2+0x10/0x10
[  225.763953][ T4972]  ? __x64_sys_rt_sigprocmask+0x28f/0x410
[  225.763986][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.764020][ T4972]  ? rcu_is_watching+0x12/0xc0
[  225.764060][ T4972]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.764093][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.764127][ T4972]  ? lockdep_hardirqs_on+0x78/0x100
[  225.764167][ T4972]  __x64_sys_openat+0x12d/0x210
[  225.764195][ T4972]  ? __pfx___x64_sys_openat+0x10/0x10
[  225.764223][ T4972]  ? ksys_read+0x1ac/0x250
[  225.764263][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.764300][ T4972]  do_syscall_64+0x115/0x870
[  225.764340][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.764370][ T4972] RIP: 0033:0x7f8378751407
[  225.764392][ T4972] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  225.764420][ T4972] RSP: 002b:00007ffe9e81c700 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  225.764447][ T4972] RAX: ffffffffffffffda RBX: 00007f83786c7780 RCX: 00007f8378751407
[  225.764467][ T4972] RDX: 0000000000080800 RSI: 00007ffe9e81c910 RDI: ffffffffffffff9c
[  225.764486][ T4972] RBP: 00007ffe9e81c910 R08: 0000000000000000 R09: 0000000000000000
[  225.764504][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020
[  225.764522][ T4972] R13: 00007ffe9e81ca10 R14: 0000555bd09bf7fe R15: 00007ffe9e81ca10
[  225.764550][ T4972]  </TASK>
[  225.764560][ T4972] 
[  226.106700][ T4972] Allocated by task 139:
[  226.110937][ T4972]  kasan_save_stack+0x30/0x50
[  226.115733][ T4972]  kasan_save_track+0x14/0x30
[  226.120433][ T4972]  __kasan_slab_alloc+0x89/0x90
[  226.125282][ T4972]  kmem_cache_alloc_node_noprof+0x27d/0x6b0
[  226.131202][ T4972]  kmalloc_reserve+0x148/0x350
[  226.135972][ T4972]  __alloc_skb+0x185/0x710
[  226.140402][ T4972]  ndisc_alloc_skb+0xd8/0x530
[  226.145095][ T4972]  ndisc_send_rs+0x370/0x680
[  226.149712][ T4972]  addrconf_rs_timer+0x424/0x880
[  226.154666][ T4972]  call_timer_fn+0x19a/0x610
[  226.159257][ T4972]  __run_timers+0x757/0xb00
[  226.163763][ T4972]  run_timer_base+0x114/0x190
[  226.168443][ T4972]  run_timer_softirq+0x1a/0x50
[  226.173211][ T4972]  handle_softirqs+0x1ea/0x9b0
[  226.177988][ T4972]  __irq_exit_rcu+0x162/0x210
[  226.182678][ T4972]  irq_exit_rcu+0x9/0x30
[  226.186931][ T4972]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  226.192579][ T4972]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  226.198565][ T4972] 
[  226.200875][ T4972] Freed by task 1166:
[  226.204843][ T4972]  kasan_save_stack+0x30/0x50
[  226.209543][ T4972]  kasan_save_track+0x14/0x30
[  226.214242][ T4972]  kasan_save_free_info+0x3b/0x70
[  226.219278][ T4972]  __kasan_slab_free+0x5f/0x80
[  226.224040][ T4972]  kfree+0x22b/0x6c0
[  226.227947][ T4972]  skb_free_head+0xb9/0x160
[  226.232459][ T4972]  skb_release_data+0x6c5/0x8e0
[  226.237325][ T4972]  consume_skb+0xc4/0x110
[  226.241674][ T4972]  macvlan_process_broadcast+0x2b2/0x690
[  226.247344][ T4972]  process_one_work+0xa23/0x1940
[  226.252286][ T4972]  worker_thread+0x5ef/0xe50
[  226.256884][ T4972]  kthread+0x370/0x450
[  226.260976][ T4972]  ret_from_fork+0x72b/0xd50
[  226.265579][ T4972]  ret_from_fork_asm+0x1a/0x30
[  226.270362][ T4972] 
[  226.272671][ T4972] The buggy address belongs to the object at ffff888054914680
[  226.272671][ T4972]  which belongs to the cache skbuff_small_head of size 704
[  226.287248][ T4972] The buggy address is located 108 bytes inside of
[  226.287248][ T4972]  freed 704-byte region [ffff888054914680, ffff888054914940)
[  226.301044][ T4972] 
[  226.303355][ T4972] The buggy address belongs to the physical page:
[  226.309750][ T4972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54914
[  226.318506][ T4972] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  226.327002][ T4972] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  226.334547][ T4972] page_type: f5(slab)
[  226.338528][ T4972] raw: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  226.347113][ T4972] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  226.355702][ T4972] head: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  226.364552][ T4972] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  226.373226][ T4972] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  226.381899][ T4972] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  226.390563][ T4972] page dumped because: kasan: bad access detected
[  226.396964][ T4972] page_owner tracks the page as allocated
[  226.402661][ T4972] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6227, tgid 6227 (syz.0.98), ts 130796797343, free_ts 130215898113
[  226.423261][ T4972]  post_alloc_hook+0xfd/0x120
[  226.427955][ T4972]  get_page_from_freelist+0xf48/0x3530
[  226.433430][ T4972]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  226.439345][ T4972]  new_slab+0xa2/0x640
[  226.443428][ T4972]  refill_objects+0xe3/0x410
[  226.448035][ T4972]  __pcs_replace_empty_main+0x376/0x680
[  226.453592][ T4972]  kmem_cache_alloc_node_noprof+0x52c/0x6b0
[  226.459511][ T4972]  kmalloc_reserve+0x148/0x350
[  226.464276][ T4972]  __alloc_skb+0x185/0x710
[  226.468706][ T4972]  skb_copy+0x1ca/0x3a0
[  226.472877][ T4972]  mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830
[  226.478963][ T4972]  mac80211_hwsim_tx_frame+0x1b7/0x250
[  226.484438][ T4972]  mac80211_hwsim_beacon_tx+0x56c/0xa00
[  226.490000][ T4972]  __iterate_interfaces+0x2e6/0x650
[  226.495214][ T4972]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  226.502258][ T4972]  mac80211_hwsim_beacon+0xe5/0x2a0
[  226.507462][ T4972] page last free pid 5624 tgid 5624 stack trace:
[  226.513779][ T4972]  __free_frozen_pages+0x79f/0x1090
[  226.518987][ T4972]  qlist_free_all+0x47/0xf0
[  226.523507][ T4972]  kasan_quarantine_reduce+0x1a0/0x1f0
[  226.528987][ T4972]  __kasan_slab_alloc+0x69/0x90
[  226.533836][ T4972]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  226.539315][ T4972]  do_getname+0x35/0x390
[  226.543559][ T4972]  __x64_sys_unlink+0x36/0x70
[  226.548260][ T4972]  do_syscall_64+0x115/0x870
[  226.552864][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.558762][ T4972] 
[  226.561068][ T4972] Memory state around the buggy address:
[  226.566688][ T4972]  ffff888054914580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.574755][ T4972]  ffff888054914600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  226.582814][ T4972] >ffff888054914680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.590863][ T4972]                                                           ^
[  226.598307][ T4972]  ffff888054914700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.606362][ T4972]  ffff888054914780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.614412][ T4972] ==================================================================
[  226.629241][ T5641] Bluetooth: hci5: command 0x0406 tx timeout
[  226.635882][ T7691] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  226.636254][ T5641] Bluetooth: hci1: command 0x0406 tx timeout
[  226.651891][ T4972] ==================================================================
[  226.659957][ T4972] BUG: KASAN: slab-use-after-free in sur40_open+0x46c/0x500
[  226.667267][ T4972] Read of size 8 at addr ffff888088762000 by task acpid/4972
[  226.674629][ T4972] 
[  226.676950][ T4972] CPU: 1 UID: 0 PID: 4972 Comm: acpid Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  226.676991][ T4972] Tainted: [B]=BAD_PAGE
[  226.677001][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  226.677018][ T4972] Call Trace:
[  226.677028][ T4972]  <TASK>
[  226.677039][ T4972]  dump_stack_lvl+0x100/0x190
[  226.677072][ T4972]  print_report+0x13d/0x4b0
[  226.677113][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.677147][ T4972]  ? __virt_addr_valid+0x239/0x430
[  226.677183][ T4972]  ? sur40_open+0x46c/0x500
[  226.677217][ T4972]  kasan_report+0xdf/0x1c0
[  226.677249][ T4972]  ? sur40_open+0x46c/0x500
[  226.677285][ T4972]  ? __pfx_sur40_open+0x10/0x10
[  226.677320][ T4972]  sur40_open+0x46c/0x500
[  226.677355][ T4972]  input_open_device+0x24c/0x3d0
[  226.677391][ T4972]  evdev_open+0x52f/0x690
[  226.677437][ T4972]  ? __pfx_evdev_open+0x10/0x10
[  226.677481][ T4972]  chrdev_open+0x234/0x6a0
[  226.677521][ T4972]  ? __pfx_apparmor_file_open+0x10/0x10
[  226.677567][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  226.677608][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.677642][ T4972]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  226.677674][ T4972]  do_dentry_open+0x6ab/0x14d0
[  226.677711][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  226.677781][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.677818][ T4972]  vfs_open+0x82/0x3f0
[  226.677841][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.677877][ T4972]  path_openat+0x2873/0x4280
[  226.677925][ T4972]  ? __pfx_path_openat+0x10/0x10
[  226.677975][ T4972]  do_file_open+0x20e/0x430
[  226.678038][ T4972]  ? __pfx_do_file_open+0x10/0x10
[  226.678094][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.678128][ T4972]  ? alloc_fd+0x471/0x7a0
[  226.678171][ T4972]  ? do_getname+0x191/0x390
[  226.678200][ T4972]  do_sys_openat2+0x10f/0x1e0
[  226.678227][ T4972]  ? __pfx_do_sys_openat2+0x10/0x10
[  226.678254][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.678289][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.678323][ T4972]  ? rcu_is_watching+0x12/0xc0
[  226.678363][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.678396][ T4972]  ? trace_irq_enable.constprop.0+0x122/0x160
[  226.678437][ T4972]  __x64_sys_openat+0x12d/0x210
[  226.678465][ T4972]  ? __pfx___x64_sys_openat+0x10/0x10
[  226.678492][ T4972]  ? ksys_read+0x1ac/0x250
[  226.678529][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.678563][ T4972]  ? rcu_is_watching+0x12/0xc0
[  226.678604][ T4972]  do_syscall_64+0x115/0x870
[  226.678645][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.678674][ T4972] RIP: 0033:0x7f8378751407
[  226.678696][ T4972] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  226.678724][ T4972] RSP: 002b:00007ffe9e81c700 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  226.678755][ T4972] RAX: ffffffffffffffda RBX: 00007f83786c7780 RCX: 00007f8378751407
[  226.678775][ T4972] RDX: 0000000000080800 RSI: 00007ffe9e81c910 RDI: ffffffffffffff9c
[  226.678794][ T4972] RBP: 00007ffe9e81c910 R08: 0000000000000000 R09: 0000000000000000
[  226.678812][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020
[  226.678830][ T4972] R13: 00007ffe9e81ca10 R14: 0000555bd09bf7fe R15: 00007ffe9e81ca10
[  226.678858][ T4972]  </TASK>
[  226.678867][ T4972] 
[  227.000447][ T4972] Allocated by task 5857:
[  227.004777][ T4972]  kasan_save_stack+0x30/0x50
[  227.009466][ T4972]  kasan_save_track+0x14/0x30
[  227.014157][ T4972]  __kasan_kmalloc+0xaa/0xb0
[  227.018775][ T4972]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  227.024151][ T4972]  sur40_probe+0x1a8/0x1580
[  227.028653][ T4972]  usb_probe_interface+0x303/0x8f0
[  227.033793][ T4972]  really_probe+0x241/0xa60
[  227.038303][ T4972]  __driver_probe_device+0x20e/0x450
[  227.043622][ T4972]  driver_probe_device+0x4a/0x140
[  227.048653][ T4972]  __device_attach_driver+0x1df/0x320
[  227.054039][ T4972]  bus_for_each_drv+0x159/0x1e0
[  227.058908][ T4972]  __device_attach+0x1e4/0x4d0
[  227.063678][ T4972]  device_initial_probe+0xaf/0xd0
[  227.068713][ T4972]  bus_probe_device+0x64/0x160
[  227.073480][ T4972]  device_add+0x121d/0x1970
[  227.078008][ T4972]  usb_set_configuration+0xd97/0x1c60
[  227.083387][ T4972]  usb_generic_driver_probe+0xa1/0xe0
[  227.088758][ T4972]  usb_probe_device+0xef/0x400
[  227.093526][ T4972]  really_probe+0x241/0xa60
[  227.098031][ T4972]  __driver_probe_device+0x20e/0x450
[  227.103323][ T4972]  driver_probe_device+0x4a/0x140
[  227.108351][ T4972]  __device_attach_driver+0x1df/0x320
[  227.113735][ T4972]  bus_for_each_drv+0x159/0x1e0
[  227.118579][ T4972]  __device_attach+0x1e4/0x4d0
[  227.123347][ T4972]  device_initial_probe+0xaf/0xd0
[  227.128381][ T4972]  bus_probe_device+0x64/0x160
[  227.133143][ T4972]  device_add+0x121d/0x1970
[  227.137653][ T4972]  usb_new_device.cold+0x685/0x115c
[  227.142877][ T4972]  hub_event+0x30a3/0x4a60
[  227.147297][ T4972]  process_one_work+0xa23/0x1940
[  227.152228][ T4972]  worker_thread+0x5ef/0xe50
[  227.156816][ T4972]  kthread+0x370/0x450
[  227.160915][ T4972]  ret_from_fork+0x72b/0xd50
[  227.165505][ T4972]  ret_from_fork_asm+0x1a/0x30
[  227.170274][ T4972] 
[  227.172579][ T4972] Freed by task 5857:
[  227.176545][ T4972]  kasan_save_stack+0x30/0x50
[  227.181237][ T4972]  kasan_save_track+0x14/0x30
[  227.185923][ T4972]  kasan_save_free_info+0x3b/0x70
[  227.190949][ T4972]  __kasan_slab_free+0x5f/0x80
[  227.195704][ T4972]  kfree+0x22b/0x6c0
[  227.199602][ T4972]  sur40_probe+0xc36/0x1580
[  227.204120][ T4972]  usb_probe_interface+0x303/0x8f0
[  227.209242][ T4972]  really_probe+0x241/0xa60
[  227.213768][ T4972]  __driver_probe_device+0x20e/0x450
[  227.219059][ T4972]  driver_probe_device+0x4a/0x140
[  227.224103][ T4972]  __device_attach_driver+0x1df/0x320
[  227.229492][ T4972]  bus_for_each_drv+0x159/0x1e0
[  227.234341][ T4972]  __device_attach+0x1e4/0x4d0
[  227.239122][ T4972]  device_initial_probe+0xaf/0xd0
[  227.244150][ T4972]  bus_probe_device+0x64/0x160
[  227.248923][ T4972]  device_add+0x121d/0x1970
[  227.253432][ T4972]  usb_set_configuration+0xd97/0x1c60
[  227.258810][ T4972]  usb_generic_driver_probe+0xa1/0xe0
[  227.264202][ T4972]  usb_probe_device+0xef/0x400
[  227.268972][ T4972]  really_probe+0x241/0xa60
[  227.273477][ T4972]  __driver_probe_device+0x20e/0x450
[  227.278768][ T4972]  driver_probe_device+0x4a/0x140
[  227.283794][ T4972]  __device_attach_driver+0x1df/0x320
[  227.289188][ T4972]  bus_for_each_drv+0x159/0x1e0
[  227.294036][ T4972]  __device_attach+0x1e4/0x4d0
[  227.298802][ T4972]  device_initial_probe+0xaf/0xd0
[  227.303834][ T4972]  bus_probe_device+0x64/0x160
[  227.308604][ T4972]  device_add+0x121d/0x1970
[  227.313117][ T4972]  usb_new_device.cold+0x685/0x115c
[  227.318315][ T4972]  hub_event+0x30a3/0x4a60
[  227.322739][ T4972]  process_one_work+0xa23/0x1940
[  227.327668][ T4972]  worker_thread+0x5ef/0xe50
[  227.332251][ T4972]  kthread+0x370/0x450
[  227.336341][ T4972]  ret_from_fork+0x72b/0xd50
[  227.340933][ T4972]  ret_from_fork_asm+0x1a/0x30
[  227.345700][ T4972] 
[  227.348010][ T4972] The buggy address belongs to the object at ffff888088762000
[  227.348010][ T4972]  which belongs to the cache kmalloc-4k of size 4096
[  227.362053][ T4972] The buggy address is located 0 bytes inside of
[  227.362053][ T4972]  freed 4096-byte region [ffff888088762000, ffff888088763000)
[  227.375775][ T4972] 
[  227.378093][ T4972] The buggy address belongs to the physical page:
[  227.384484][ T4972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x88760
[  227.393253][ T4972] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  227.401748][ T4972] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  227.409297][ T4972] page_type: f5(slab)
[  227.413271][ T4972] raw: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122
[  227.421847][ T4972] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  227.430441][ T4972] head: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122
[  227.439103][ T4972] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  227.447765][ T4972] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  227.456428][ T4972] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  227.465081][ T4972] page dumped because: kasan: bad access detected
[  227.471474][ T4972] page_owner tracks the page as allocated
[  227.477170][ T4972] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4987, tgid 4987 (udevd), ts 112971486687, free_ts 0
[  227.496362][ T4972]  post_alloc_hook+0xfd/0x120
[  227.501049][ T4972]  get_page_from_freelist+0xf48/0x3530
[  227.506518][ T4972]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  227.512425][ T4972]  new_slab+0xa2/0x640
[  227.516522][ T4972]  refill_objects+0xe3/0x410
[  227.521149][ T4972]  __pcs_replace_empty_main+0x376/0x680
[  227.526697][ T4972]  __kmalloc_noprof+0x66d/0x820
[  227.531558][ T4972]  tomoyo_realpath_from_path+0xb6/0x690
[  227.537113][ T4972]  tomoyo_check_open_permission+0x2af/0x3c0
[  227.543009][ T4972]  tomoyo_file_open+0x6b/0x90
[  227.547679][ T4972]  security_file_open+0xb5/0x1e0
[  227.552629][ T4972]  do_dentry_open+0x588/0x14d0
[  227.557408][ T4972]  vfs_open+0x82/0x3f0
[  227.561471][ T4972]  path_openat+0x2873/0x4280
[  227.566091][ T4972]  do_file_open+0x20e/0x430
[  227.570628][ T4972]  do_sys_openat2+0x10f/0x1e0
[  227.575298][ T4972] page_owner free stack trace missing
[  227.580648][ T4972] 
[  227.582954][ T4972] Memory state around the buggy address:
[  227.588567][ T4972]  ffff888088761f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.596619][ T4972]  ffff888088761f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.604667][ T4972] >ffff888088762000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  227.612710][ T4972]                    ^
[  227.616763][ T4972]  ffff888088762080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  227.624832][ T4972]  ffff888088762100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  227.632877][ T4972] ==================================================================
[  227.646755][ T5641] Bluetooth: hci2: command 0x0406 tx timeout
[  227.650422][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout
[  227.660022][ T4972] ==================================================================
[  227.668085][ T4972] BUG: KASAN: slab-use-after-free in sur40_open+0x426/0x500
[  227.675399][ T4972] Read of size 4 at addr ffff888054914000 by task acpid/4972
[  227.682782][ T4972] 
[  227.685098][ T4972] CPU: 1 UID: 0 PID: 4972 Comm: acpid Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  227.685138][ T4972] Tainted: [B]=BAD_PAGE
[  227.685149][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  227.685166][ T4972] Call Trace:
[  227.685176][ T4972]  <TASK>
[  227.685186][ T4972]  dump_stack_lvl+0x100/0x190
[  227.685219][ T4972]  print_report+0x13d/0x4b0
[  227.685262][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.685295][ T4972]  ? __virt_addr_valid+0x239/0x430
[  227.685331][ T4972]  ? sur40_open+0x426/0x500
[  227.685365][ T4972]  kasan_report+0xdf/0x1c0
[  227.685395][ T4972]  ? sur40_open+0x426/0x500
[  227.685432][ T4972]  ? __pfx_sur40_open+0x10/0x10
[  227.685466][ T4972]  sur40_open+0x426/0x500
[  227.685501][ T4972]  input_open_device+0x24c/0x3d0
[  227.685537][ T4972]  evdev_open+0x52f/0x690
[  227.685582][ T4972]  ? __pfx_evdev_open+0x10/0x10
[  227.685626][ T4972]  chrdev_open+0x234/0x6a0
[  227.685666][ T4972]  ? __pfx_apparmor_file_open+0x10/0x10
[  227.685699][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  227.685744][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.685778][ T4972]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  227.685811][ T4972]  do_dentry_open+0x6ab/0x14d0
[  227.685848][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  227.685901][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.685946][ T4972]  vfs_open+0x82/0x3f0
[  227.685970][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.686006][ T4972]  path_openat+0x2873/0x4280
[  227.686054][ T4972]  ? __pfx_path_openat+0x10/0x10
[  227.686100][ T4972]  do_file_open+0x20e/0x430
[  227.686141][ T4972]  ? __pfx_do_file_open+0x10/0x10
[  227.686194][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.686228][ T4972]  ? alloc_fd+0x471/0x7a0
[  227.686271][ T4972]  ? do_getname+0x191/0x390
[  227.686301][ T4972]  do_sys_openat2+0x10f/0x1e0
[  227.686327][ T4972]  ? __pfx_do_sys_openat2+0x10/0x10
[  227.686353][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.686388][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.686422][ T4972]  ? rcu_is_watching+0x12/0xc0
[  227.686462][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.686496][ T4972]  ? trace_irq_enable.constprop.0+0x122/0x160
[  227.686537][ T4972]  __x64_sys_openat+0x12d/0x210
[  227.686565][ T4972]  ? __pfx___x64_sys_openat+0x10/0x10
[  227.686592][ T4972]  ? ksys_read+0x1ac/0x250
[  227.686629][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.686663][ T4972]  ? rcu_is_watching+0x12/0xc0
[  227.686705][ T4972]  do_syscall_64+0x115/0x870
[  227.686751][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.686780][ T4972] RIP: 0033:0x7f8378751407
[  227.686802][ T4972] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  227.686831][ T4972] RSP: 002b:00007ffe9e81c700 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  227.686858][ T4972] RAX: ffffffffffffffda RBX: 00007f83786c7780 RCX: 00007f8378751407
[  227.686877][ T4972] RDX: 0000000000080800 RSI: 00007ffe9e81c910 RDI: ffffffffffffff9c
[  227.686896][ T4972] RBP: 00007ffe9e81c910 R08: 0000000000000000 R09: 0000000000000000
[  227.686915][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020
[  227.686932][ T4972] R13: 00007ffe9e81ca10 R14: 0000555bd09bf7fe R15: 00007ffe9e81ca10
[  227.686962][ T4972]  </TASK>
[  227.686975][ T4972] 
[  228.008635][ T4972] Allocated by task 139:
[  228.012871][ T4972]  kasan_save_stack+0x30/0x50
[  228.017583][ T4972]  kasan_save_track+0x14/0x30
[  228.022282][ T4972]  __kasan_slab_alloc+0x89/0x90
[  228.027131][ T4972]  kmem_cache_alloc_node_noprof+0x27d/0x6b0
[  228.033048][ T4972]  kmalloc_reserve+0x148/0x350
[  228.037815][ T4972]  __alloc_skb+0x185/0x710
[  228.042243][ T4972]  wg_packet_send_keepalive+0x7a/0x300
[  228.047709][ T4972]  wg_expired_send_persistent_keepalive+0x5e/0x80
[  228.054147][ T4972]  call_timer_fn+0x19a/0x610
[  228.058738][ T4972]  __run_timers+0x757/0xb00
[  228.063243][ T4972]  run_timer_base+0x114/0x190
[  228.067923][ T4972]  run_timer_softirq+0x1a/0x50
[  228.072693][ T4972]  handle_softirqs+0x1ea/0x9b0
[  228.077470][ T4972]  __irq_exit_rcu+0x162/0x210
[  228.082179][ T4972]  irq_exit_rcu+0x9/0x30
[  228.086449][ T4972]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  228.092097][ T4972]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.098085][ T4972] 
[  228.100393][ T4972] Freed by task 5749:
[  228.104361][ T4972]  kasan_save_stack+0x30/0x50
[  228.109061][ T4972]  kasan_save_track+0x14/0x30
[  228.113759][ T4972]  kasan_save_free_info+0x3b/0x70
[  228.118795][ T4972]  __kasan_slab_free+0x5f/0x80
[  228.123556][ T4972]  kfree+0x22b/0x6c0
[  228.127545][ T4972]  skb_free_head+0xb9/0x160
[  228.132057][ T4972]  skb_release_data+0x6c5/0x8e0
[  228.136925][ T4972]  consume_skb+0xc4/0x110
[  228.141277][ T4972]  wg_packet_rx_poll+0xc77/0x21a0
[  228.146307][ T4972]  __napi_poll.constprop.0+0xaf/0x450
[  228.151690][ T4972]  napi_threaded_poll_loop+0x52f/0x870
[  228.157162][ T4972]  napi_threaded_poll+0x3a8/0x4b0
[  228.162196][ T4972]  kthread+0x370/0x450
[  228.166290][ T4972]  ret_from_fork+0x72b/0xd50
[  228.170893][ T4972]  ret_from_fork_asm+0x1a/0x30
[  228.175675][ T4972] 
[  228.178018][ T4972] The buggy address belongs to the object at ffff888054914000
[  228.178018][ T4972]  which belongs to the cache skbuff_small_head of size 704
[  228.192592][ T4972] The buggy address is located 0 bytes inside of
[  228.192592][ T4972]  freed 704-byte region [ffff888054914000, ffff8880549142c0)
[  228.206219][ T4972] 
[  228.208533][ T4972] The buggy address belongs to the physical page:
[  228.214931][ T4972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54914
[  228.223690][ T4972] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  228.232189][ T4972] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  228.239732][ T4972] page_type: f5(slab)
[  228.243711][ T4972] raw: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  228.252302][ T4972] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  228.260891][ T4972] head: 00fff00000000040 ffff88801fee7280 dead000000000100 dead000000000122
[  228.269587][ T4972] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[  228.278258][ T4972] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  228.286932][ T4972] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  228.295594][ T4972] page dumped because: kasan: bad access detected
[  228.301994][ T4972] page_owner tracks the page as allocated
[  228.307694][ T4972] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6227, tgid 6227 (syz.0.98), ts 130796797343, free_ts 130215898113
[  228.328291][ T4972]  post_alloc_hook+0xfd/0x120
[  228.332985][ T4972]  get_page_from_freelist+0xf48/0x3530
[  228.338461][ T4972]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  228.344376][ T4972]  new_slab+0xa2/0x640
[  228.348455][ T4972]  refill_objects+0xe3/0x410
[  228.353058][ T4972]  __pcs_replace_empty_main+0x376/0x680
[  228.358621][ T4972]  kmem_cache_alloc_node_noprof+0x52c/0x6b0
[  228.364535][ T4972]  kmalloc_reserve+0x148/0x350
[  228.369301][ T4972]  __alloc_skb+0x185/0x710
[  228.373732][ T4972]  skb_copy+0x1ca/0x3a0
[  228.377901][ T4972]  mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830
[  228.383992][ T4972]  mac80211_hwsim_tx_frame+0x1b7/0x250
[  228.389476][ T4972]  mac80211_hwsim_beacon_tx+0x56c/0xa00
[  228.395045][ T4972]  __iterate_interfaces+0x2e6/0x650
[  228.400270][ T4972]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  228.407316][ T4972]  mac80211_hwsim_beacon+0xe5/0x2a0
[  228.412525][ T4972] page last free pid 5624 tgid 5624 stack trace:
[  228.418851][ T4972]  __free_frozen_pages+0x79f/0x1090
[  228.424067][ T4972]  qlist_free_all+0x47/0xf0
[  228.428587][ T4972]  kasan_quarantine_reduce+0x1a0/0x1f0
[  228.434066][ T4972]  __kasan_slab_alloc+0x69/0x90
[  228.438917][ T4972]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  228.444398][ T4972]  do_getname+0x35/0x390
[  228.448643][ T4972]  __x64_sys_unlink+0x36/0x70
[  228.453340][ T4972]  do_syscall_64+0x115/0x870
[  228.457948][ T4972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.463844][ T4972] 
[  228.466153][ T4972] Memory state around the buggy address:
[  228.471773][ T4972]  ffff888054913f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  228.479831][ T4972]  ffff888054913f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  228.487888][ T4972] >ffff888054914000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.495943][ T4972]                    ^
[  228.500001][ T4972]  ffff888054914080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.508057][ T4972]  ffff888054914100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.516117][ T4972] ==================================================================
[  228.525704][ T5633] Bluetooth: hci3: command 0x0406 tx timeout
[  228.531747][ T5633] Bluetooth: hci6: command 0x0c1a tx timeout
[  228.538759][ T4972] ==================================================================
[  228.546819][ T4972] BUG: KASAN: slab-use-after-free in usb_submit_urb+0x1510/0x19b0
[  228.554653][ T4972] Read of size 4 at addr ffff888054914018 by task acpid/4972
[  228.562020][ T4972] 
[  228.564338][ T4972] CPU: 1 UID: 0 PID: 4972 Comm: acpid Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  228.564387][ T4972] Tainted: [B]=BAD_PAGE
[  228.564399][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  228.564421][ T4972] Call Trace:
[  228.564432][ T4972]  <TASK>
[  228.564444][ T4972]  dump_stack_lvl+0x100/0x190
[  228.564483][ T4972]  print_report+0x13d/0x4b0
[  228.564535][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.564578][ T4972]  ? __virt_addr_valid+0x239/0x430
[  228.564621][ T4972]  ? usb_submit_urb+0x1510/0x19b0
[  228.564661][ T4972]  kasan_report+0xdf/0x1c0
[  228.564699][ T4972]  ? usb_submit_urb+0x1510/0x19b0
[  228.564747][ T4972]  usb_submit_urb+0x1510/0x19b0
[  228.564788][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.564830][ T4972]  ? lockdep_init_map_type+0x5c/0x250
[  228.564872][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.564914][ T4972]  ? __init_swait_queue_head+0xca/0x150
[  228.564962][ T4972]  usb_start_wait_urb+0x10e/0x580
[  228.565003][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.565046][ T4972]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  228.565087][ T4972]  ? trace_kmalloc+0xeb/0x110
[  228.565127][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.565169][ T4972]  ? __asan_memset+0x23/0x50
[  228.565218][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.565263][ T4972]  usb_control_msg+0x328/0x4b0
[  228.565305][ T4972]  ? __pfx_usb_control_msg+0x10/0x10
[  228.565346][ T4972]  ? sur40_open+0x426/0x500
[  228.565392][ T4972]  ? __pfx_sur40_open+0x10/0x10
[  228.565435][ T4972]  sur40_open+0xf5/0x500
[  228.565479][ T4972]  input_open_device+0x24c/0x3d0
[  228.565523][ T4972]  evdev_open+0x52f/0x690
[  228.565581][ T4972]  ? __pfx_evdev_open+0x10/0x10
[  228.565636][ T4972]  chrdev_open+0x234/0x6a0
[  228.565686][ T4972]  ? __pfx_apparmor_file_open+0x10/0x10
[  228.565727][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  228.565795][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.565837][ T4972]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  228.565877][ T4972]  do_dentry_open+0x6ab/0x14d0
[  228.565923][ T4972]  ? __pfx_chrdev_open+0x10/0x10
[  228.565975][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.566020][ T4972]  vfs_open+0x82/0x3f0
[  228.566048][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.566094][ T4972]  path_openat+0x2873/0x4280
[  228.566153][ T4972]  ? __pfx_path_openat+0x10/0x10
[  228.566211][ T4972]  do_file_open+0x20e/0x430
[  228.566264][ T4972]  ? __pfx_do_file_open+0x10/0x10
[  228.566329][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.566371][ T4972]  ? alloc_fd+0x471/0x7a0
[  228.566424][ T4972]  ? do_getname+0x191/0x390
[  228.566460][ T4972]  do_sys_openat2+0x10f/0x1e0
[  228.566492][ T4972]  ? __pfx_do_sys_openat2+0x10/0x10
[  228.566525][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.566568][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.566610][ T4972]  ? rcu_is_watching+0x12/0xc0
[  228.566660][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.566702][ T4972]  ? trace_irq_enable.constprop.0+0x122/0x160
[  228.566758][ T4972]  __x64_sys_openat+0x12d/0x210
[  228.566792][ T4972]  ? __pfx___x64_sys_openat+0x10/0x10
[  228.566826][ T4972]  ? ksys_read+0x1ac/0x250
[  228.566873][ T4972]  ? srso_alias_return_thunk+0x5/0xfbef5